NixServerConfig/module/forgejo.nix
2025-12-24 20:17:53 +01:00

40 lines
1 KiB
Nix

{ config, lib, ... }:
let
cfg = config.services.forgejo;
in
{
age.secrets = lib.mkIf config.services.forgejo.enable {
# Keep your secret definitions as they are
YfDrVBDJcVoYNZeJ.file = ../secrets/cache/YfDrVBDJcVoYNZeJ;
kuc8wgd09HbRU99u.file = ../secrets/cache/kuc8wgd09HbRU99u;
XNkwPolezNRELmWu.file = ../secrets/cache/XNkwPolezNRELmWu;
};
services.forgejo = {
enable = true;
database.type = "postgres";
lfs.enable = true;
secrets.mailer = {
PASSWD = config.age.secrets.XNkwPolezNRELmWu.path;
USER = config.age.secrets.kuc8wgd09HbRU99u.path;
SMTP_ADDR = config.age.secrets.YfDrVBDJcVoYNZeJ.path;
};
settings = {
service.DISABLE_REGISTRATION = true;
server = {
DOMAIN = "git.${config.module.domain}";
ROOT_URL = "https://git.${config.module.domain}/";
HTTP_PORT = config.module.forgejo.internalPort;
};
mailer = {
ENABLED = true;
SMTP_PORT = 465;
PROTOCOL = "smtps";
};
};
};
}