configuration.nix/hosts/wynne/services/apps/forgejo.nix

{ pkgs, config, lib, ... }:
let
  cfg = config.services.forgejo;
  domainName = "forge.acomputer.lol";
in
{
  sops.secrets = {
    "forgejo/runner_registration_token_file" = {
      mode = "400";
      owner = config.users.users.root.name;
      group = config.users.users.root.group;
    };
  };
  services = {
    gitea-actions-runner = {
      package = pkgs.forgejo-runner;
      instances = {
        runner-x86_64 = {
          enable = true;
          name = "runner-x86_64";
          labels = [
            "docker:docker://debian:stable"
            "docker-amd64:docker://debian:stable"
          ];
          tokenFile = config.sops.secrets."forgejo/runner_registration_token_file".path;
          url = "https://forge.acomputer.lol";
        };
      };
    };
    forgejo = {
      enable = true;
      package = pkgs.forgejo;
      stateDir = "/mnt/data/Forgejo";
      settings = {
        database = {
          DB_TYPE = lib.mkForce "postgres";
          HOST = "127.0.0.1:5432";
          USER = cfg.database.user;
          NAME = cfg.database.name;
        };
        server = {
          ROOT_URL = "https://${domainName}";
          PROTOCOL = "http";
          DISABLE_SSH = false;
          START_SSH_SERVER = true;
          BUILTIN_SSH_SERVER_USER = "forge";
          SSH_PORT = 42069;
          SSH_LISTEN_HOST = "10.10.10.13";
          HTTP_ADDR = "10.10.10.13";
          HTTP_PORT = 3000;
          DOMAIN = domainName;
        };
        session = {
          COOKIE_SECURE = true;
        };
        service = {
          DISABLE_REGISTRATION = true;
        };
      };
      database.createDatabase = true;
    };
  };
}