From b599f7e425ceb27ddb1b2f589253058951d7c1a2 Mon Sep 17 00:00:00 2001
From: Charlie Root <charlie@charlieroot.dev>
Date: Sun, 2 Mar 2025 21:40:06 +0100
Subject: [PATCH] forgejo/module.nix: init

---
 modules/services/forgejo/module.nix | 53 +++++++++++++++++++++++++++++
 1 file changed, 53 insertions(+)
 create mode 100644 modules/services/forgejo/module.nix

diff --git a/modules/services/forgejo/module.nix b/modules/services/forgejo/module.nix
new file mode 100644
index 0000000..8f3da57
--- /dev/null
+++ b/modules/services/forgejo/module.nix
@@ -0,0 +1,53 @@
+{config, ...}: let
+  cfg = config.services.forgejo;
+  srv = cfg.settings.server;
+in {
+  services.nginx = {
+    virtualHosts.${cfg.settings.server.DOMAIN} = {
+      forceSSL = true;
+      enableACME = true;
+      extraConfig = ''
+        client_max_body_size 512M;
+      '';
+      locations."/".proxyPass = "http://localhost:${toString srv.HTTP_PORT}";
+    };
+  };
+
+  services.forgejo = {
+    enable = true;
+    database.type = "postgres";
+    # Enable support for Git Large File Storage
+    lfs.enable = true;
+    settings = {
+      server = {
+        DOMAIN = "copeberg.org";
+        # You need to specify this to remove the port from URLs in the web UI.
+        ROOT_URL = "https://${srv.DOMAIN}/";
+        HTTP_PORT = 3000;
+      };
+      # You can temporarily allow registration to create an admin user.
+      service.DISABLE_REGISTRATION = true;
+      # Add support for actions, based on act: https://github.com/nektos/act
+      actions = {
+        ENABLED = false;
+        DEFAULT_ACTIONS_URL = "github";
+      };
+      # Sending emails is completely optional
+      # You can send a test email from the web UI at:
+      # Profile Picture > Site Administration > Configuration >  Mailer Configuration
+      mailer = {
+        ENABLED = false;
+        # SMTP_ADDR = "mail.example.com";
+        # FROM = "noreply@${srv.DOMAIN}";
+        # USER = "noreply@${srv.DOMAIN}";
+      };
+    };
+    # mailerPasswordFile = config.age.secrets.forgejo-mailer-password.path;
+  };
+
+  # age.secrets.forgejo-mailer-password = {
+  #   file = ../secrets/forgejo-mailer-password.age;
+  #   mode = "400";
+  #   owner = "forgejo";
+  # };
+}