# A simple Gitea webhook to mirror all my repositories { config, lib, pkgs, ... }: let cfg = config.my.services.lohr; settingsFormat = pkgs.formats.yaml { }; domain = config.networking.domain; lohrDomain = "lohr.${config.networking.domain}"; lohrPkg = let flake = builtins.getFlake "github:alarsyo/lohr?rev=e68fcf3e522fc055c1a42ad10ac24c97ee068742"; in flake.defaultPackage."x86_64-linux"; # FIXME: use correct system in { options.my.services.lohr = with lib; { enable = mkEnableOption "Automatic gitea repositories mirroring"; port = mkOption { type = types.port; default = 9192; example = 8080; description = "Internal port of the Lohr service"; }; setting = mkOption rec { type = settingsFormat.type; apply = recursiveUpdate default; default = { default_remotes = [ "git@github.com:ambroisie" "git@git.sr.ht:~ambroisie" ]; }; description = "Global settings configuration file"; }; sharedSecretFile = mkOption { type = types.str; example = "/run/secrets/lohr.env"; description = "Shared secret between lohr and Gitea hook"; }; }; config = lib.mkIf cfg.enable { systemd.services.lohr = { wantedBy = [ "multi-user.target" ]; serviceConfig = { EnvironmentFile = [ cfg.sharedSecretFile ]; Environment = [ "ROCKET_PORT=${toString cfg.port}" "ROCKET_LOG=normal" "LOHR_HOME=/var/lib/lohr/" "LOHR_CONFIG=" ]; ExecStart = let configFile = settingsFormat.generate "lohr-config.yaml" cfg.setting; in "${lohrPkg}/bin/lohr --config ${configFile}"; StateDirectory = "lohr"; WorkingDirectory = "/var/lib/lohr"; User = "lohr"; Group = "lohr"; }; path = with pkgs; [ git ]; }; users.users.lohr = { isSystemUser = true; home = "/var/lib/lohr"; createHome = true; group = "lohr"; }; users.groups.lohr = { }; services.nginx.virtualHosts."${lohrDomain}" = { forceSSL = true; useACMEHost = domain; locations."/" = { proxyPass = "http://127.0.0.1:${toString cfg.port}/"; }; }; }; }