blob: 1e575ca0c9a224ee6517805389a4f5262bc8f3c3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
{
config,
lib,
inputs,
...
}:
let
forgejoCfg = config.services.forgejo;
robotsTxtPath = forgejoCfg.stateDir + "/custom/public/robots.txt";
in
{
config = lib.mkMerge [
{
services.forgejo = {
database = {
type = "postgres";
};
settings = {
server = {
PROTOCOL = "http";
DOMAIN = lib.mkDefault ("git." + config.networking.domain);
ROOT_URL = "https://" + forgejoCfg.settings.server.DOMAIN + "/";
DISABLE_SSH = lib.mkDefault true;
};
metrics = {
ENABLED = true;
};
oauth2_client = {
ENABLE_AUTO_REGISTRATION = lib.mkDefault true;
};
service = {
DISABLE_REGISTRATION = lib.mkDefault true;
};
packages = {
ENABLED = lib.mkDefault false;
};
actions = {
ENABLED = lib.mkDefault false;
};
};
};
}
(lib.mkIf forgejoCfg.enable {
services.nginx.virtualHosts.${forgejoCfg.settings.server.DOMAIN} = {
locations."/" = {
proxyPass = "http://${forgejoCfg.settings.server.HTTP_ADDR}:${toString forgejoCfg.settings.server.HTTP_PORT}";
};
};
systemd.tmpfiles.settings."forgejo-settings" = {
${robotsTxtPath}."L+" = {
argument = inputs.codeberg-infra + "/etc/gitea/public/robots.txt";
};
${dirOf robotsTxtPath}.d = {
inherit (forgejoCfg) user group;
};
};
})
];
}
|
