Bruno BELANYI
5fc1b7ae74
Because I think `restic` will not deal with the compressed format of `gitea`'s native `dump` command, I set up a manual backup. This could lead to potentially corrupted data if I happen to backup at the exact same time as a push to a repository. However given the frequency of backups planned, I assume that most of them will be fine.
78 lines
1.9 KiB
Nix
78 lines
1.9 KiB
Nix
# A low-ressource, full-featured git forge.
|
|
{ config, lib, ... }:
|
|
let
|
|
cfg = config.my.services.gitea;
|
|
domain = config.networking.domain;
|
|
giteaDomain = "gitea.${config.networking.domain}";
|
|
in
|
|
{
|
|
options.my.services.gitea = with lib; {
|
|
enable = mkEnableOption "Gitea";
|
|
port = mkOption {
|
|
type = types.port;
|
|
default = 3000;
|
|
example = 8080;
|
|
description = "Internal port";
|
|
};
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
services.gitea = {
|
|
enable = true;
|
|
|
|
appName = "Ambroisie's forge";
|
|
httpPort = cfg.port;
|
|
domain = "${giteaDomain}";
|
|
rootUrl = "https://${giteaDomain}";
|
|
|
|
user = "git";
|
|
lfs.enable = true;
|
|
|
|
useWizard = true;
|
|
disableRegistration = true;
|
|
|
|
# only send cookies via HTTPS
|
|
cookieSecure = true;
|
|
|
|
database = {
|
|
type = "postgres"; # Automatic setup
|
|
user = "git"; # User needs to be the same as gitea user
|
|
};
|
|
|
|
# NixOS module uses `gitea dump` to backup repositories and the database,
|
|
# but it produces a single .zip file that's not very backup friendly.
|
|
# I configure my backup system manually below.
|
|
dump.enable = false;
|
|
};
|
|
|
|
users.users.git = {
|
|
description = "Gitea Service";
|
|
home = config.services.gitea.stateDir;
|
|
useDefaultShell = true;
|
|
group = "git";
|
|
|
|
# The service for gitea seems to hardcode the group as
|
|
# gitea, so, uh, just in case?
|
|
extraGroups = [ "gitea" ];
|
|
|
|
isSystemUser = true;
|
|
};
|
|
users.groups.git = { };
|
|
|
|
# Proxy to Gitea
|
|
services.nginx.virtualHosts."${giteaDomain}" = {
|
|
forceSSL = true;
|
|
useACMEHost = "${domain}";
|
|
|
|
locations."/".proxyPass = "http://localhost:${toString cfg.port}/";
|
|
};
|
|
|
|
my.services.backup = {
|
|
paths = [
|
|
config.services.gitea.lfs.contentDir
|
|
config.services.gitea.repositoryRoot
|
|
];
|
|
};
|
|
};
|
|
}
|