nixos-config/services/gitea/default.nix

110 lines
2.8 KiB
Nix
Raw Normal View History

2021-02-02 16:55:19 +01:00
{ config, lib, pkgs, ... }:
let
2022-01-11 16:08:21 +01:00
inherit (lib)
mkEnableOption
mkIf
mkOption
;
2021-02-02 16:55:19 +01:00
cfg = config.my.services.gitea;
my = config.my;
domain = config.networking.domain;
in {
2022-01-11 16:08:21 +01:00
options.my.services.gitea = let inherit (lib) types; in {
2021-02-02 16:55:19 +01:00
enable = mkEnableOption "Personal Git hosting with Gitea";
privatePort = mkOption {
2021-02-02 18:24:28 +01:00
type = types.port;
2021-02-02 16:55:19 +01:00
default = 8082;
example = 8082;
description = "Port to serve the app";
};
};
config = mkIf cfg.enable {
# use git as user to have `git clone git@git.domain`
users.users.git = {
description = "Gitea Service";
home = config.services.gitea.stateDir;
useDefaultShell = true;
group = "git";
# the systemd service for the gitea module seems to hardcode the group as
# gitea, so, uh, just in case?
extraGroups = [ "gitea" ];
isSystemUser = true;
};
users.groups.git = { };
services.gitea = {
enable = true;
user = "git";
domain = "git.${domain}";
appName = "Personal Forge";
rootUrl = "https://git.${domain}/";
httpAddress = "127.0.0.1";
httpPort = cfg.privatePort;
2021-04-09 18:01:01 +02:00
log.level = "Warn"; # [ "Trace" "Debug" "Info" "Warn" "Error" "Critical" ]
2021-02-02 16:55:19 +01:00
lfs.enable = true;
# NOTE: temporarily remove this for initial setup
disableRegistration = true;
# only send cookies via HTTPS
cookieSecure = true;
settings = {
other.SHOW_FOOTER_VERSION = false;
2021-04-09 19:43:51 +02:00
repository = {
ENABLE_PUSH_CREATE_USER = true;
2021-04-09 20:31:58 +02:00
DEFAULT_BRANCH = "main";
2021-04-09 19:43:51 +02:00
};
2021-02-02 16:55:19 +01:00
};
2021-02-02 18:09:10 +01:00
# NixOS module uses `gitea dump` to backup repositories and the database,
# but it produces a single .zip file that's not very restic friendly.
2021-02-02 18:09:10 +01:00
# I configure my backup system manually below.
dump.enable = false;
2021-02-02 16:55:19 +01:00
database = {
type = "postgres";
# user needs to be the same as gitea user
user = "git";
};
};
2021-02-02 18:09:10 +01:00
# FIXME: Borg *could* be backing up files while they're being edited by
# gitea, so it may produce corrupt files in the snapshot if I push stuff
# around midnight. I'm not sure how `gitea dump` handles this either,
# though.
my.services.restic-backup = {
2021-02-02 18:09:10 +01:00
paths = [
config.services.gitea.lfs.contentDir
config.services.gitea.repositoryRoot
];
};
2021-03-23 22:24:12 +01:00
services.postgresqlBackup = {
2021-02-02 18:09:10 +01:00
databases = [ "gitea" ];
2021-02-02 16:55:19 +01:00
};
services.nginx = {
virtualHosts = {
"git.${domain}" = {
forceSSL = true;
useACMEHost = domain;
2021-02-02 16:55:19 +01:00
locations."/" = {
proxyPass = "http://127.0.0.1:${toString cfg.privatePort}";
};
};
};
};
2021-04-09 16:53:05 +02:00
systemd.services.gitea.preStart = "${pkgs.coreutils}/bin/ln -sfT ${./templates} ${config.services.gitea.stateDir}/custom/templates";
2021-02-02 16:55:19 +01:00
};
}