home-server/services/forgejo.nix

{ ... }:

{
  systemd.services.forgejo = {
    wants = [ "network-online.target" ];
    after = [ "network-online.target" ];
    preStart = ''
      mkdir -p /var/lib/forgejo/.ssh
      chmod 700 /var/lib/forgejo/.ssh
    '';
  };

  networking.firewall.interfaces.wg0.allowedTCPPorts = [
    22
    3000
  ];

  services.forgejo = {
    enable = true;
    settings.service.DISABLE_REGISTRATION = true;
    settings.actions.ENABLED = true;
    settings.server = {
      DOMAIN = "forgejo.ellie.town";
      ROOT_URL = "https://forgejo.ellie.town/";
      HTTP_ADDR = "10.10.0.2";
      HTTP_PORT = 3000;
      START_SSH_SERVER = false;
      SSH_DOMAIN = "forgejo.ellie.town";
      SSH_PORT = 2222;
    };
  };
}