1 files changed, 66 insertions, 0 deletions
diff --git a/nixos/services/forgejo/default.nix b/nixos/services/forgejo/default.nix
new file mode 100644
index 0000000..b15d2d9
--- /dev/null
+++ b/nixos/services/forgejo/default.nix
@@ -0,0 +1,66 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+with lib; let
+  cfg = config.options.trivium.services.forgejo;
+in {
+  options.trivium.services.forgejo = {
+    enable = mkEnableOption "forgejo settings";
+
+    virtualHost = mkOption {
+      type = types.string;
+      description = "Virtualhost to use for nginx's reverse proxy. Usually something like git.<your server>.com";
+    };
+
+    appName = mkOption {
+      type = types.string;
+      description = "You guess what this does";
+    };
+
+    disableRegistration = mkOption {
+      type = types.bool;
+      default = true;
+      description = "Turn this off just to create the first admin account";
+    };
+  };
+
+  config = mkIf cfg.enable {
+    services = {
+      nginx = {
+        virtualHosts."${cfg.virtualHost}" = {
+          enableACME = true;
+          forceSSL = true;
+          locations."/".proxyPass = "http://localhost:9170";
+        };
+      };
+
+      forgejo = {
+        enable = true;
+        lfs.enable = true;
+        useWizard = false;
+        settings = {
+          general.APP_NAME = "${cfg.appName}";
+          ui.DEFAULT_THEME = "forgejo-dark";
+          server = {
+            DOMAIN = "${cfg.virtualHost}";
+            ROOT_URL = "https://${cfg.virtualHost}";
+            HTTP_PORT = 9170;
+            LANDING_PAGE = "explore";
+          };
+
+          service.DISABLE_REGISTRATION = ${cfg.disableRegistration};
+
+          actions = {
+            ENABLED = true;
+          };
+          mailer = {
+            ENABLED = false;
+          };
+        };
+      };
+    };
+  };
+}