nixos-config/nixos/machines/orbi/service-forgejo.nix

{ config, lib, pkgs, ... }:
{

  services.nginx = {
    enable = true;
    statusPage = true;
    virtualHosts = {
      "git.ingolf-wagner.de" = {
        forceSSL = true;
        enableACME = true;
        locations."/" = {
          proxyPass = "http://localhost:${toString config.services.forgejo.httpPort}";
        };
      };
    };
  };

  services.forgejo = {
    enable = true;
    appName = "git.ingolf-wagner.de";
    #cookieSecure = true;
    #disableRegistration = true;
    settings = {
      server.ROOT_URL = "https://git.ingolf-wagner.de/";
      server.DOMAIN = "git.ingolf-wagner.de";
      service.DISABLE_REGISTRATION = true;
      session.COOKIE_SECURE = true;
      log.LEVEL = "Warn";
      other = {
        SHOW_FOOTER_VERSION = false;
      };
    };
  };

  backup.dirs = [ "/var/lib/gitea" ];

}