{ ... }:

{
  networking.firewall.interfaces.wg0.allowedTCPPorts = [
    3000
    2222
  ];

  services.forgejo = {
    enable = true;
    settings.service.DISABLE_REGISTRATION = true;
    settings.actions.ENABLED = true;
    settings.server = {
      DOMAIN = "forgejo.ellie.town";
      ROOT_URL = "https://forgejo.ellie.town/";
      HTTP_ADDR = "10.10.0.2";
      HTTP_PORT = 3000;
      START_SSH_SERVER = true;
      SSH_DOMAIN = "forgejo.ellie.town";
      SSH_PORT = 2222;
      SSH_LISTEN_PORT = 2222;
    };
  };
}