diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
new file mode 100644
index 0000000..ae04c89
--- /dev/null
+++ b/.github/workflows/mirror.yml
@@ -0,0 +1,19 @@
+name: mirror to gitlab
+on: [push]
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v1
+      - name: mirror
+        uses: SvanBoxel/gitlab-mirror-and-ci-action@5c211f993d35256d96b772d995972f434b94e11a
+        with:
+          args: "https://git.cything.io/cy/infra"
+        env:
+          FOLLOW_TAGS: "true"
+          FORCE_PUSH: "true"
+          GITLAB_HOSTNAME: "git.cything.io"
+          GITLAB_USERNAME: "cy"
+          GITLAB_PASSWORD: ${{ secrets.GITLAB_PASSWORD }}
+          GITLAB_PROJECT_ID: "2"
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/hosts/chunk/default.nix b/hosts/chunk/default.nix
index 192854e..563aa21 100644
--- a/hosts/chunk/default.nix
+++ b/hosts/chunk/default.nix
@@ -139,8 +139,7 @@
   ];
   # for forgejo
   users.users.git = {
-    isNormalUser = true;
-    home = "/var/lib/forgejo";
+    isSystemUser = true;
     group = "git";
   };
   users.groups.git = {};