.

flake.lock

@@ -27,11 +27,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1771194746,
-        "narHash": "sha256-U/BvGW5p405bbsxd8IdMHbSUNVXsLpgPy0ieQwEh3mE=",
+        "lastModified": 1771196666,
+        "narHash": "sha256-mEdhnyzuW2fTP/dBpJE6EnvTH2fbQXOOwZgjJ1trQmU=",
         "ref": "refs/heads/main",
-        "rev": "4e1dac32a5c0bf71021027bee35eca53892b069f",
-        "revCount": 6085,
+        "rev": "55ccfdb9733347f1985206e782d6fd89e46c15c3",
+        "revCount": 6089,
         "type": "git",
         "url": "https://forgejo.ellis.link/continuwuation/continuwuity"
       },

flake.nix

@@ -57,7 +57,8 @@
           ./services/wireguard-inner.nix
           ./services/matrix.nix
           ./services/ergo.nix
-          ./services/akkoma.nix
+          ./services/forgejo.nix
+          # ./services/akkoma.nix
         ];
       };
 

services/forgejo.nix

@@ -0,0 +1,16 @@
+{ ... }:
+
+{
+  networking.firewall.interfaces.wg0.allowedTCPPorts = [ 3000 ];
+
+  services.forgejo = {
+    enable = true;
+    settings.service.DISABLE_REGISTRATION = true;
+    settings.server = {
+      DOMAIN = "forgejo.ellie.town";
+      ROOT_URL = "https://forgejo.ellie.town/";
+      HTTP_ADDR = "10.10.0.2";
+      HTTP_PORT = 3000;
+    };
+  };
+}

services/wireguard-outer.nix

@@ -69,6 +69,14 @@
     #   };
     # };
 
+    virtualHosts."forgejo.ellie.town" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://10.10.0.2:3000";
+      };
+    };
+
     virtualHosts."irc.ellie.town" = {
       enableACME = true;
       forceSSL = true;