bryan/nixos
0
0
Fork 0
mirror of https://github.com/itme-brain/nixos.git synced 2026-03-23 16:29:42 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

forgejo initial config

Browse source
This commit is contained in:
Bryan Ramos 2026-03-12 03:22:46 -04:00
parent e2e6fb5dae
commit 40c509731e
2 changed files with 29 additions and 36 deletions
Download patch file Download diff file Expand all files Collapse all files

1
src/system/machines/server/system.nix
View file

@ -6,6 +6,7 @@
modules.system = {
nginx.enable = true;
forgejo.enable = true;
};
users.users = {

64
src/system/modules/forgejo/default.nix
View file

@ -4,54 +4,46 @@ with lib;
let
cfg = config.modules.system.forgejo;
nginx = config.modules.system.nginx;
domain = "ramos.codes";
socketPath = "/run/forgejo/forgejo.sock";
in
{ options.modules.system.forgejo = { enable = mkEnableOption "Forgejo Server"; };
{
options.modules.system.forgejo = {
enable = mkEnableOption "Forgejo Server";
};
config = mkIf cfg.enable {
users = {
users = {
"git" = {
description = "Git server system user";
isSystemUser = true;
group = "git";
extraGroups = mkIf nginx.enable [
"web"
];
};
"nginx" = {
extraGroups = mkIf nginx.enable [
"git"
];
};
};
groups = {
"git" = {
members = [
"git"
];
};
};
users.users.nginx = mkIf nginx.enable {
extraGroups = [ "git" ];
};
services.forgejo = rec {
services.forgejo = {
enable = true;
user = "git";
group = "git";
stateDir = "/var/lib/forgejo";
settings = {
server = {
PROTOCOL = "http+unix";
DOMAIN = "127.0.0.1";
HTTP_ADDR = "/run/forgejo/forgejo.sock";
};
settings.server = {
DOMAIN = "git.${domain}";
ROOT_URL = "https://git.${domain}/";
PROTOCOL = "http+unix";
HTTP_ADDR = socketPath;
SSH_DOMAIN = "git.${domain}";
SSH_PORT = 22;
START_SSH_SERVER = false;
};
database = {
inherit user;
type = "sqlite3";
path = "${stateDir}/data/forgejo.db";
createDatabase = true;
path = "/var/lib/forgejo/data/forgejo.db";
};
};
services.nginx.virtualHosts."git.${domain}" = mkIf nginx.enable {
useACMEHost = domain;
forceSSL = true;
locations."/" = {
proxyPass = "http://unix:${socketPath}";
};
};
};