mirror of
https://github.com/harryssecret/homelab-nix.git
synced 2025-08-08 06:30:18 +02:00
harry123
8a522c525c
- Updated flake.nix to change Alejandra and other inputs to follow the new repository structure. - Modified uptime-kuma configurations to reflect the new domain for Caddy reverse proxy settings. - Adjusted various multimedia services in Sisyphe to use the new domain for Caddy virtual hosts. - Disabled the Sabnzbd service in Sisyphe and updated its Caddy configuration. - Corrected multiple service configurations in Sisyphe to point to the new domain, including Grafana, Nextcloud, and Synapse Matrix. - Ensured all references to hypervirtual.world are replaced with rougebordeaux.xyz across all relevant files.
90 lines
2.3 KiB
Nix
90 lines
2.3 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
{
|
|
imports = [ ./forgejo-smtp.nix ];
|
|
sops.secrets.smtp_address = { };
|
|
sops.secrets.smtp_password = {
|
|
owner = "forgejo";
|
|
};
|
|
sops.secrets.forgejoInitialMail = {
|
|
owner = "forgejo";
|
|
};
|
|
sops.secrets.forgejoInitialPassword = {
|
|
owner = "forgejo";
|
|
};
|
|
|
|
services.forgejo = {
|
|
enable = true;
|
|
lfs.enable = true;
|
|
database = {
|
|
type = "postgres";
|
|
};
|
|
settings = {
|
|
server = {
|
|
DOMAIN = "git.rougebordeaux.xyz";
|
|
ROOT_URL = "https://git.rougebordeaux.xyz";
|
|
HTTP_PORT = 3333;
|
|
};
|
|
actions = {
|
|
ENABLED = true;
|
|
DEFAULT_ACTIONS_URL = "github";
|
|
};
|
|
mailer = {
|
|
ENABLED = true;
|
|
};
|
|
service.DISABLE_REGISTRATION = true;
|
|
};
|
|
mailerPasswordFile = config.sops.secrets.smtp_password.path;
|
|
};
|
|
|
|
servuces.fail2ban = {
|
|
enable = true;
|
|
jails = {
|
|
forgejo = {
|
|
settings = {
|
|
logpath = "/var/log/forgejo/log/gitea.log";
|
|
filter = "forgejo";
|
|
port = "http,https,ssh";
|
|
maxretry = 20;
|
|
findtime = 300;
|
|
bantime = 900;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
/*
|
|
sops.secrets.forgejo-runner-token = {
|
|
owner = "forgejo";
|
|
};
|
|
services.gitea-actions-runner = {
|
|
package = pkgs.forgejo-actions-runner;
|
|
instances.default = {
|
|
enable = true;
|
|
name = "monolith";
|
|
url = "https://git.rougebordeaux.xyz";
|
|
# Obtaining the path to the runner token file may differ
|
|
# tokenFile should be in format TOKEN=<secret>, since it's EnvironmentFile for systemd
|
|
tokenFile = config.sops.secrets.forgejo-runner-token.path;
|
|
labels = [
|
|
"ubuntu-latest:docker://node:16-bullseye"
|
|
"ubuntu-22.04:docker://node:16-bullseye"
|
|
## optionally provide native execution on the host:
|
|
# "native:host"
|
|
];
|
|
};
|
|
};
|
|
*/
|
|
systemd.services.forgejo.preStart = ''
|
|
create="${lib.getExe config.services.forgejo.package} admin user create"
|
|
$create --admin --email "`cat ${config.sops.secrets.forgejoInitialMail.path}`" --username you --password "`cat ${config.sops.secrets.forgejoInitialPassword.path}`" &>/dev/null || true
|
|
'';
|
|
|
|
services.caddy.virtualHosts."http://git.rougebordeaux.xyz".extraConfig = ''
|
|
reverse_proxy :3333
|
|
'';
|
|
}
|