fix: Reorder authelia bypass policies

nixos/mirai/services/gitea.nix

@@ -1,4 +1,8 @@
-{config, ...}: {
+{
+  lib,
+  config,
+  ...
+}: {
   virtualisation.docker.enable = true;
   sops = {
     # secrets."gitea/registration".owner = config.systemd.services.gitea-actions-mirai.serviceConfig.User;
@@ -33,7 +37,7 @@
     gitea-actions-runner = {
       instances = {
         mirai = {
-          enable = false;
+          enable = true;
           name = "mirai";
           url = "https://git.darksailor.dev";
           labels = [
@@ -57,10 +61,6 @@
         settings = {
           access_control = {
             rules = [
-              {
-                domain = "git.darksailor.dev";
-                policy = "one_factor";
-              }
               {
                 domain = "git.darksailor.dev";
                 policy = "bypass";
@@ -68,6 +68,10 @@
                   "^/api([/?].*)?$"
                 ];
               }
+              {
+                domain = "git.darksailor.dev";
+                policy = "one_factor";
+              }
             ];
           };
         };