nixos/system/services/forgejo.nix

{
  config,
  pkgs,
  ...
}: {
  imports = [./caddy.nix];
  services = {
    forgejo = {
      enable = true;
      settings = {
        server = {
          ROOT_URL = "https://git.xenia.me.uk";
          DOMAIN = "git.xenia.me.uk";
          HTTP_ADDR = "127.0.0.1";
          HTTP_PORT = 3100;
          DISABLE_SSH = true;
        };
        ui = {DEFAULT_THEME = "forgejo-auto";};
        admin = {DISABLE_REGULAR_ORG_CREATION = true;};
        service = {DISABLE_REGISTRATION = true;};
      };
    };
    # gitea-actions-runner = {
    #   package = pkgs.forgejo-runner;
    #   instances.default = {
    #     enable = true;
    #     name = "monolith";
    #     url = config.services.forgejo.settings.server.ROOT_URL;
    #     tokenFile = /var/lib/forgejo/runner_registration_token;
    #     labels = ["native:host"];
    #   };
    # };
    caddy.virtualHosts."git.xenia.me.uk".extraConfig = "reverse_proxy http://localhost:3100";
  };
}