63 lines
1.6 KiB
Nix
63 lines
1.6 KiB
Nix
{ pkgs, config, lib, ... }:
|
|
let
|
|
cfg = config.services.forgejo;
|
|
domainName = "forge.acomputer.lol";
|
|
in
|
|
{
|
|
sops.secrets = {
|
|
"forgejo/runner_registration_token_file" = {
|
|
mode = "400";
|
|
owner = config.users.users.root.name;
|
|
group = config.users.users.root.group;
|
|
};
|
|
};
|
|
services = {
|
|
gitea-actions-runner = {
|
|
package = pkgs.forgejo-runner;
|
|
instances = {
|
|
runner-x86_64 = {
|
|
enable = true;
|
|
name = "runner-x86_64";
|
|
labels = [
|
|
"docker:docker://debian:stable"
|
|
"docker-amd64:docker://debian:stable"
|
|
];
|
|
tokenFile = config.sops.secrets."forgejo/runner_registration_token_file".path;
|
|
url = "https://forge.acomputer.lol";
|
|
};
|
|
};
|
|
};
|
|
forgejo = {
|
|
enable = true;
|
|
package = pkgs.forgejo;
|
|
stateDir = "/mnt/data/Forgejo";
|
|
settings = {
|
|
database = {
|
|
DB_TYPE = lib.mkForce "postgres";
|
|
HOST = "127.0.0.1:5432";
|
|
USER = cfg.database.user;
|
|
NAME = cfg.database.name;
|
|
};
|
|
server = {
|
|
ROOT_URL = "https://${domainName}";
|
|
PROTOCOL = "http";
|
|
DISABLE_SSH = false;
|
|
START_SSH_SERVER = true;
|
|
BUILTIN_SSH_SERVER_USER = "forge";
|
|
SSH_PORT = 42069;
|
|
SSH_LISTEN_HOST = "10.10.10.13";
|
|
HTTP_ADDR = "10.10.10.13";
|
|
HTTP_PORT = 3000;
|
|
DOMAIN = domainName;
|
|
};
|
|
session = {
|
|
COOKIE_SECURE = true;
|
|
};
|
|
service = {
|
|
DISABLE_REGISTRATION = true;
|
|
};
|
|
};
|
|
database.createDatabase = true;
|
|
};
|
|
};
|
|
}
|