nixos/services/traefik/gitea.nix

{...}: {
  imports = [./default.nix];
  services.traefik.dynamicConfigOptions = {
    http = {
      routers.gitea = {
        rule = "Host(`git.xenia.me.uk`)";
        entryPoints = ["http" "https"];
        service = "gitea-websecure";
        tls = {certResolver = "default";};
      };
      services.gitea-websecure.loadBalancer.servers = [{url = "http://localhost:3000";}];
    };
  };
}