nix-config/services/gitea.nix

78 lines
1.9 KiB
Nix
Raw Normal View History

2021-01-31 17:46:46 +01:00
# A low-ressource, full-featured git forge.
{ config, lib, ... }:
let
cfg = config.my.services.gitea;
domain = config.networking.domain;
giteaDomain = "gitea.${config.networking.domain}";
in
{
options.my.services.gitea = with lib; {
enable = mkEnableOption "Gitea";
port = mkOption {
type = types.port;
default = 3042;
example = 8080;
description = "Internal port";
};
2021-01-31 17:46:46 +01:00
};
config = lib.mkIf cfg.enable {
services.gitea = {
enable = true;
appName = "Ambroisie's forge";
httpPort = cfg.port;
2021-01-31 17:46:46 +01:00
domain = "${giteaDomain}";
rootUrl = "https://${giteaDomain}";
user = "git";
lfs.enable = true;
useWizard = false;
2021-01-31 17:46:46 +01:00
disableRegistration = true;
# only send cookies via HTTPS
cookieSecure = true;
database = {
type = "postgres"; # Automatic setup
user = "git"; # User needs to be the same as gitea user
};
# NixOS module uses `gitea dump` to backup repositories and the database,
# but it produces a single .zip file that's not very backup friendly.
# I configure my backup system manually below.
dump.enable = false;
2021-01-31 17:46:46 +01:00
};
users.users.git = {
description = "Gitea Service";
home = config.services.gitea.stateDir;
useDefaultShell = true;
group = "git";
# The service for gitea seems to hardcode the group as
# gitea, so, uh, just in case?
extraGroups = [ "gitea" ];
isSystemUser = true;
2021-01-31 17:46:46 +01:00
};
users.groups.git = { };
2021-01-31 17:46:46 +01:00
# Proxy to Gitea
services.nginx.virtualHosts."${giteaDomain}" = {
forceSSL = true;
useACMEHost = "${domain}";
locations."/".proxyPass = "http://localhost:${toString cfg.port}/";
2021-01-31 17:46:46 +01:00
};
my.services.backup = {
paths = [
config.services.gitea.lfs.contentDir
config.services.gitea.repositoryRoot
];
};
2021-01-31 17:46:46 +01:00
};
}