{ config, lib, ... }:
let
  cfg = config.services.forgejo;
in
{
  age.secrets = lib.mkIf config.services.forgejo.enable {
    # Keep your secret definitions as they are
    YfDrVBDJcVoYNZeJ.file = ../secrets/cache/YfDrVBDJcVoYNZeJ;
    kuc8wgd09HbRU99u.file = ../secrets/cache/kuc8wgd09HbRU99u;
    XNkwPolezNRELmWu.file = ../secrets/cache/XNkwPolezNRELmWu;
  };

  services.forgejo = {
    enable = true;
    database.type = "postgres";
    lfs.enable = true;

    secrets.mailer = {
      PASSWD = config.age.secrets.XNkwPolezNRELmWu.path;
      USER = config.age.secrets.kuc8wgd09HbRU99u.path;
      SMTP_ADDR = config.age.secrets.YfDrVBDJcVoYNZeJ.path;
    };

    settings = {
      service.DISABLE_REGISTRATION = true;

      server = {
        DOMAIN = "git.${config.module.domain}";
        ROOT_URL = "https://git.${config.module.domain}/";
        HTTP_PORT = config.module.forgejo.internalPort;
      };

      mailer = {
        ENABLED = true;
        SMTP_PORT = 465;
        PROTOCOL = "smtps";
      };
    };
  };
}