1
Fork 0
satellite/hosts/nixos/lapetus/services/forgejo.nix

55 lines
1.4 KiB
Nix

{ lib, config, ... }:
{
sops.secrets.forgejo_mail_password = {
sopsFile = ../secrets.yaml;
owner = config.services.forgejo.user;
group = config.services.forgejo.group;
};
satellite.cloudflared.at.git.port = config.satellite.ports.forgejo;
services.forgejo = {
enable = true;
stateDir = "/persist/state/var/lib/forgejo";
mailerPasswordFile = config.sops.secrets.forgejo_mail_password.path;
dump = {
enable = true;
type = "tar.gz";
};
lfs.enable = true;
# See [the cheatsheet](https://docs.gitea.com/next/administration/config-cheat-sheet)
settings = {
default.APP_NAME = "moonforge";
server = {
DOMAIN = config.satellite.cloudflared.at.git.host;
HTTP_PORT = config.satellite.cloudflared.at.git.port;
ROOT_URL = config.satellite.cloudflared.at.git.url;
LANDING_PAGE = "prescientmoon"; # Make my profile the landing page
};
cron.ENABLED = true;
service.DISABLE_REGISTRATION = true;
session.COOKIE_SECURE = true;
mailer = {
ENABLED = true;
SMTP_PORT = 465;
SMTP_ADDR = "smtp.migadu.com";
USER = "git@orbit.moonythm.dev";
};
repository = {
DISABLE_STARS = true;
DISABLED_REPO_UNITS = "";
DEFAULT_REPO_UNITS = lib.strings.concatStringsSep "," [
"repo.code"
];
};
};
};
}