Forgejo

clients/quadraticserver/forgejo.nix

@@ -0,0 +1,41 @@
+{
+  pkgs,
+  config,
+  ...
+}: {
+  services = let
+    domain = "git.henryhiles.com";
+    socket = "/run/forgejo/socket";
+  in {
+    forgejo = {
+      enable = true;
+      package = pkgs.forgejo; # Not LTS
+      settings = {
+        service.DISABLE_REGISTRATION = true;
+        repository.GO_GET_CLONE_URL_PROTOCOL = "ssh";
+
+        server = {
+          DOMAIN = domain;
+          ROOT_URL = "https://${domain}";
+          HTTP_ADDR = socket;
+          PROTOCOL = "http+unix";
+        };
+      };
+    };
+
+    gitea-actions-runner = {
+      package = pkgs.forgejo-actions-runner;
+      instances.default = {
+        enable = true;
+        name = "monolith";
+        url = "https://git.henryhiles.com";
+        tokenFile = config.age.secrets."runnerToken.age".path;
+        labels = [
+          "native:host"
+        ];
+      };
+    };
+
+    caddy.virtualHosts."${domain}".extraConfig = "reverse_proxy unix/${socket}";
+  };
+}