71 lines
1.6 KiB
Nix
71 lines
1.6 KiB
Nix
|
{
|
||
|
|
config,
|
||
|
|
lib,
|
||
|
|
pkgs,
|
||
|
|
...
|
||
|
|
}:
|
||
|
|
with lib; let
|
||
|
|
cfg = config.options.trivium.services.forgejo;
|
||
|
|
in {
|
||
|
|
options.trivium.services.forgejo = {
|
||
|
|
enable = mkEnableOption "forgejo settings";
|
||
|
|
|
||
|
|
virtualHost = mkOption {
|
||
|
|
type = types.string;
|
||
|
|
description = "Virtualhost to use for nginx's reverse proxy. Usually something like git.<your server>.com";
|
||
|
|
};
|
||
|
|
|
||
|
|
appName = mkOption {
|
||
|
|
type = types.string;
|
||
|
|
description = "You guess what this does";
|
||
|
|
};
|
||
|
|
|
||
|
|
disableRegistration = mkOption {
|
||
|
|
type = types.bool;
|
||
|
|
default = true;
|
||
|
|
description = "Turn this off just to create the first admin account";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
config = mkIf cfg.enable {
|
||
|
|
services = {
|
||
|
|
nginx = {
|
||
|
|
virtualHosts."${cfg.virtualHost}" = {
|
||
|
|
enableACME = true;
|
||
|
|
forceSSL = true;
|
||
|
|
extraConfig = ''
|
||
|
|
proxy_headers_hash_max_size 512;
|
||
|
|
proxy_headers_hash_bucket_size 128;
|
||
|
|
'';
|
||
|
|
locations."/".proxyPass = "http://localhost:9170";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
forgejo = {
|
||
|
|
enable = true;
|
||
|
|
lfs.enable = true;
|
||
|
|
useWizard = false;
|
||
|
|
settings = {
|
||
|
|
general.APP_NAME = "${cfg.appName}";
|
||
|
|
ui.DEFAULT_THEME = "forgejo-dark";
|
||
|
|
server = {
|
||
|
|
DOMAIN = "${cfg.virtualHost}";
|
||
|
|
ROOT_URL = "https://${cfg.virtualHost}";
|
||
|
|
HTTP_PORT = 9170;
|
||
|
|
LANDING_PAGE = "explore";
|
||
|
|
};
|
||
|
|
|
||
|
|
service.DISABLE_REGISTRATION = ${cfg.disableRegistration};
|
||
|
|
|
||
|
|
actions = {
|
||
|
|
ENABLED = true;
|
||
|
|
};
|
||
|
|
mailer = {
|
||
|
|
ENABLED = false;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|