nixos/system/services/forgejo.nix

{
  config,
  pkgs,
  ...
}: {
  imports = [./caddy.nix];
  services = {
    forgejo = {
      enable = true;
      settings = {
        server = {
          ROOT_URL = "https://git.xenia.me.uk";
          DOMAIN = "git.xenia.me.uk";
          HTTP_ADDR = "127.0.0.1";
          HTTP_PORT = 3100;
          DISABLE_SSH = true;
        };
        ui = {DEFAULT_THEME = "forgejo-auto";};
        admin = {DISABLE_REGULAR_ORG_CREATION = true;};
        service = {DISABLE_REGISTRATION = true;};
      };
    };
    gitea-actions-runner = {
      package = pkgs.forgejo-runner;
      instances.default = {
        enable = true;
        name = "monolith";
        url = config.services.forgejo.settings.server.ROOT_URL;
        tokenFile = /var/lib/forgejo/runner_registration_token;
        labels = ["native:host"];
      };
    };
    caddy.virtualHosts."git.xenia.me.uk".extraConfig = "reverse_proxy http://localhost:3100";
  };
}