Files
dotfiles/systems/jeeves/services/gitea.nix
T
Richie e4eef6dff0
treefmt / nix fmt (pull_request) Successful in 5s
pytest / pytest (pull_request) Successful in 29s
test ebook search / test-ebook-search (pull_request) Successful in 34s
build_systems / build-brain (pull_request) Successful in 48s
build_systems / build-bob (pull_request) Successful in 48s
build_systems / build-rhapsody-in-green (pull_request) Successful in 58s
build_systems / build-jeeves (pull_request) Successful in 2m14s
feat(jeeves): centralize firewall configuration
- split networking into interface and firewall modules
- define named service ports in one location
- remove scattered service-level firewall rules
2026-08-27 08:45:52 -04:00

53 lines
1.2 KiB
Nix

let
vars = import ../vars.nix;
in
{
services.gitea = {
enable = true;
appName = "TMM Workshop";
stateDir = "${vars.services}/gitea/";
lfs.enable = true;
database = {
type = "postgres";
name = "gitea";
user = "gitea";
socket = "/run/postgresql";
port = 5432;
createDatabase = false;
};
settings = {
actions = {
ENABLED = true;
DEFAULT_ACTIONS_URL = "github";
};
service.DISABLE_REGISTRATION = true;
server = {
DOMAIN = "gitea.tmmworkshop.com";
ROOT_URL = "https://gitea.tmmworkshop.com/";
HTTP_PORT = 6443;
BUILTIN_SSH_SERVER_USER = "gitea";
SSH_USER = "gitea";
SSH_DOMAIN = "gitea.tmmworkshop.com";
SSH_PORT = 2223;
SSH_LISTEN_HOST = "0.0.0.0";
SSH_LISTEN_PORT = 2223;
START_SSH_SERVER = true;
PUBLIC_URL_DETECTION = "auto";
};
repository = {
ENABLE_PUSH_CREATE_USER = true;
DEFAULT_MERGE_STYLE = "rebase-merge";
};
log = {
LEVEL = "Trace";
ENABLE_SSH_LOG = true;
};
};
};
systemd.services.gitea = {
requires = [ "docker.service" ];
after = [ "docker.service" ];
};
}