snowflake/hosts/sakura/services/forgejo.nix
notohh 566f22e61f
All checks were successful
/ check (push) Successful in 2m5s
forgejo: enable ssh
2023-10-06 23:56:02 -04:00

67 lines
1.6 KiB
Nix

{
pkgs,
lib,
config,
...
}: {
sops.secrets.forgejo-runner-token = {owner = "forgejo";};
services.forgejo = {
enable = true;
stateDir = "/var/lib/forgejo";
settings = {
service.DISABLE_REGISTRATION = true;
DEFAULT.APP_NAME = "forgejo";
ui = {
DEFAULT_THEME = "forgejo-dark";
};
actions = {
ENABLED = true;
DEFAULT_ACTIONS_URL = "https://code.forgejo.org";
};
server = {
HTTP_PORT = 3200;
DOMAIN = "git.flake.sh";
ROOT_URL = "https://git.flake.sh";
LANDING_PAGE = "/explore/repos";
START_SSH_SERVER = true;
SSH_DOMAIN = "git.flake.sh";
SSH_PORT = 2222;
SSH_LISTEN_PORT = 2222;
SSH_LISTEN_HOST = "100.121.201.47";
};
database = {
DB_TYPE = lib.mkForce "postgres";
HOST = "192.168.1.211:5432";
NAME = "forgejo";
USER = "forgejo";
PASSWD = "forgejo";
};
metrics = {
ENABLED = true;
ENABLED_ISSUE_BY_REPOSITORY = true;
ENABLED_ISSUE_BY_LABEL = true;
};
};
};
services.gitea-actions-runner = {
package = pkgs.forgejo-actions-runner;
instances.main = {
enable = true;
name = config.networking.hostName;
url = "https://git.flake.sh";
token = config.sops.secrets.forgejo-runner-token.path;
labels = [
"debian-latest:docker://node:18-bullseye"
"ubuntu-latest:docker://node:18-bullseye"
#"native:host"
];
hostPackages = with pkgs; [
bash
curl
coreutils
wget
gitMinimal
];
};
};
}