83 lines
2.1 KiB
Nix
83 lines
2.1 KiB
Nix
{ config
|
|
, lib
|
|
, pkgs
|
|
, ... }:
|
|
|
|
let
|
|
cfg = config.server;
|
|
in {
|
|
services.nginx.virtualHosts."git.${cfg.domainName}" = let inherit (config.services.forgejo) settings; in {
|
|
quic = true;
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
locations."/".proxyPass = "http://${lib.quoteListenAddr settings.server.HTTP_ADDR}:${toString settings.server.HTTP_PORT}";
|
|
};
|
|
services.forgejo = {
|
|
enable = true;
|
|
database = {
|
|
createDatabase = false;
|
|
type = "postgres";
|
|
user = "gitea";
|
|
name = "gitea";
|
|
passwordFile = "/secrets/forgejo_db_password";
|
|
};
|
|
lfs.enable = true;
|
|
settings = {
|
|
federation.ENABLED = true;
|
|
"git.timeout" = {
|
|
DEFAULT = 6000;
|
|
MIGRATE = 60000;
|
|
MIRROR = 60000;
|
|
GC = 120;
|
|
};
|
|
mailer = {
|
|
ENABLED = true;
|
|
FROM = "Forgejo <noreply@${cfg.domainName}>";
|
|
PROTOCOL = "smtp";
|
|
SMTP_ADDR = "mail.${cfg.domainName}";
|
|
SMTP_PORT = 587;
|
|
USER = "noreply@${cfg.domainName}";
|
|
PASSWD = cfg.unhashedNoreplyPassword;
|
|
FORCE_TRUST_SERVER_CERT = true;
|
|
};
|
|
session = {
|
|
COOKIE_SECURE = true;
|
|
};
|
|
server = {
|
|
ROOT_URL = "https://git.${cfg.domainName}";
|
|
HTTP_ADDR = "::1";
|
|
HTTP_PORT = 3310;
|
|
DOMAIN = "git.${cfg.domainName}";
|
|
# START_SSH_SERVER = true;
|
|
# SSH_PORT = 2222;
|
|
};
|
|
service = {
|
|
DISABLE_REGISTRATION = true;
|
|
REGISTER_EMAIL_CONFIRM = true;
|
|
};
|
|
};
|
|
};
|
|
|
|
services.nginx.virtualHosts."cloud.${cfg.domainName}" = {
|
|
quic = true;
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
};
|
|
services.nextcloud = {
|
|
enable = true;
|
|
package = pkgs.nextcloud27;
|
|
autoUpdateApps.enable = true;
|
|
# TODO: use socket auth and remove the next line
|
|
database.createLocally = false;
|
|
config = {
|
|
adminpassFile = "/var/lib/nextcloud/admin_password";
|
|
dbpassFile = "/var/lib/nextcloud/db_password";
|
|
dbtype = "pgsql";
|
|
dbhost = "/run/postgresql";
|
|
overwriteProtocol = "https";
|
|
};
|
|
hostName = "cloud.${cfg.domainName}";
|
|
https = true;
|
|
};
|
|
}
|