nixos/system/services/forgejo.nix

{ config, ... }:
{
  imports = [ ./caddy.nix ];
  services = {
    forgejo = {
      enable = true;
      settings = {
        server = {
          ROOT_URL = "https://git.xenia.me.uk";
          DOMAIN = "git.xenia.me.uk";
          HTTP_ADDR = "127.0.0.1";
          HTTP_PORT = 3100;
          DISABLE_SSH = true;
        };
        ui = {
          DEFAULT_THEME = "forgejo-auto";
        };
        admin = {
          DISABLE_REGULAR_ORG_CREATION = true;
        };
        service = {
          DISABLE_REGISTRATION = true;
        };
      };
    };
    caddy.virtualHosts."git.xenia.me.uk".extraConfig =
      let
        port = config.services.forgejo.settings.server.HTTP_PORT;
      in
      "reverse_proxy http://localhost:${toString port}";
  };
}