37 lines
1 KiB
Nix
37 lines
1 KiB
Nix
{outputs, ...}: {
|
|
services = {
|
|
gitea = {
|
|
enable = true;
|
|
settings = {
|
|
server = {
|
|
DOMAIN = "gitea.${outputs.secrets.jimDomain}";
|
|
ROOT_URL = "https://gitea.${outputs.secrets.jimDomain}:443";
|
|
HTTP_PORT = 3115;
|
|
SSH_PORT = 2295;
|
|
START_SSH_SERVER = true;
|
|
};
|
|
mailer = {
|
|
ENABLED = true;
|
|
SMTP_ADDR = "mx.${outputs.secrets.jimDomain}";
|
|
FROM = "Jimbo's Git <noreply@${outputs.secrets.jimDomain}>";
|
|
USER = "noreply@${outputs.secrets.jimDomain}";
|
|
PASSWD = outputs.secrets.noreplyPassword;
|
|
PROTOCOL = "smtps";
|
|
};
|
|
service.REGISTER_EMAIL_CONFIRM = true;
|
|
};
|
|
};
|
|
nginx.virtualHosts."gitea.${outputs.secrets.jimDomain}" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
locations."/" = {
|
|
proxyPass = "http://127.0.0.1:3115";
|
|
proxyWebsockets = true;
|
|
};
|
|
};
|
|
};
|
|
|
|
# Allow Gitea SSH to work
|
|
networking.firewall.allowedTCPPorts = [ 2295 ];
|
|
}
|