Add gitea

hosts/surgat/default.nix

@@ -25,6 +25,7 @@ in {
   };
 
   dadada.element.enable = true;
+  dadada.gitea.enable = true;
   dadada.networking.vpnExtension = "4";
   dadada.weechat.enable = true;
   dadada.homePage.enable = true;

modules/default.nix

@@ -5,6 +5,7 @@
   element = ./element.nix;
   fido2 = ./fido2.nix;
   fileShare = ./fileShare.nix;
+  gitea = ./gitea.nix;
   networking = ./networking.nix;
   share = ./share.nix;
   steam = ./steam.nix;

modules/gitea.nix

@@ -0,0 +1,33 @@
+{ config, pkgs, lib, ... }:
+let
+  cfg = config.dadada.gitea;
+in {
+  options.dadada.gitea = {
+    enable = lib.mkEnableOption "Enable gitea";
+  };
+  config = lib.mkIf cfg.enable {
+    services.gitea = {
+      enable = true;
+      appName = "dadada Gitea";
+      rootUrl = "https://git.dadada.li/";
+      log.level = "Error";
+      domain = config.networking.domain;
+      ssh.enable = true;
+      cookieSecure = true;
+      enableUnixSocket = true;
+      database = {
+        type = "postgres";
+      };
+      disableRegistration = true;
+    };
+
+    services.nginx.virtualHosts."git.${config.networking.domain}" = {
+      enableACME = true;
+      forceSSL = true;
+
+      locations."/".extraConfig = ''
+        proxy_pass unix:/run/gitea/gitea.sock;
+      '';
+    };
+  };
+}

modules/module-list.nix

@@ -4,6 +4,7 @@
   ./element.nix
   ./fido2.nix
   ./fileShare.nix
+  ./gitea.nix
   ./homepage.nix
   ./networking.nix
   ./share.nix