init forgejo.nix

2configs/git/forgejo.nix

@@ -0,0 +1,47 @@
+{ lib, pkgs, config, ... }:
+let
+  DOMAIN = "cgit.euer.krebsco.de";
+  HTTP_PORT = 3002;
+in
+{
+  services.nginx = {
+    virtualHosts.${DOMAIN} = {
+      forceSSL = true;
+      enableACME = true;
+      extraConfig = ''
+        client_max_body_size 512M;
+      '';
+      locations."/".proxyPass = "http://localhost:${toString HTTP_PORT}";
+    };
+  };
+
+  services.forgejo = {
+    enable = true;
+    database.type = "postgres";
+    lfs.enable = true;
+    settings = {
+      server = {
+        # You need to specify this to remove the port from URLs in the web UI.
+        ROOT_URL = "https://${DOMAIN}/"; 
+        inherit HTTP_PORT DOMAIN;
+      };
+      # You can temporarily allow registration to create an admin user.
+      service.DISABLE_REGISTRATION = true; 
+      # Add support for actions, based on act: https://github.com/nektos/act
+      actions = {
+        ENABLED = true;
+        DEFAULT_ACTIONS_URL = "github";
+      };
+      # Sending emails is completely optional
+      # You can send a test email from the web UI at:
+      # Profile Picture > Site Administration > Configuration >  Mailer Configuration 
+      #mailer = {
+      #  ENABLED = true;
+      #  SMTP_ADDR = "mail.example.com";
+      #  FROM = "noreply@${srv.DOMAIN}";
+      #  USER = "noreply@${srv.DOMAIN}";
+      #};
+    };
+    #mailerPasswordFile = config.sops.secrets.forgejo-mailer-password.path;
+  };
+}