nixos/services/traefik/gitea.nix

{...}: {
  imports = [./default.nix];
  services.traefik.dynamicConfigOptions = {
    http = {
      routers.gitea = {
        rule = "Host(`git.xenia.me.uk`)";
        entryPoints = ["http" "https"];
        service = "gitea-websecure";
        tls = {certResolver = "default";};
      };
      services.gitea-websecure.loadBalancer.servers = [{url = "http://localhost:3000";}];
    };
    tcp = {
      routers.gitea-ssh = {
        rule = "HostSNI(`git.xenia.me.uk`)";
        entryPoints = ["ssh"];
        service = "gitea-sshservice";
        tls = {certResolver = "default";};
      };
      routers.gitea-ssh-local = {
        rule = "ClientIP(`192.168.0.0/16`)";
        entryPoints = ["ssh"];
        service = "gitea-sshservice";
      };
      services.gitea-sshservice.loadBalancer.servers = [{address = "localhost:30922";}];
    };
  };
}