dotfiles/systems/x86_64-linux/git/default.nix
alejandro-angulo 79228d7815
Some checks are pending
Gitea Actions Demo / Explore-Gitea-Actions (push) Waiting to run
feat: deploy forgejo publicly
2024-10-30 19:30:16 -07:00

54 lines
862 B
Nix

{
inputs,
config,
...
}: let
domain = "git.alejandr0angul0.dev";
in {
imports = ["${inputs.nixpkgs}/nixos/modules/virtualisation/digital-ocean-config.nix"];
aa = {
nix.enable = true;
services.forgejo = {
enable = true;
domain = domain;
};
services = {
openssh.enable = true;
};
};
services.nginx.virtualHosts."${domain}" = {
forceSSL = true;
enableACME = true;
};
security.acme = {
acceptTerms = true;
defaults = {
email = config.aa.user.email;
group = "nginx";
};
};
networking.hostName = "git";
networking.firewall.allowedTCPPorts = [
# SSH
22
# HTTP(S)
80
443
];
virtualisation.digitalOcean = {
setRootPassword = true;
setSshKeys = true;
};
security.sudo.wheelNeedsPassword = false;
system.stateVersion = "24.05";
}