Commit e3fb070
Changed files (5)
modules
hosts
pardofelis
services
services
forgejo
modules/hosts/pardofelis/services/caddy.nix
@@ -9,6 +9,11 @@
encode zstd gzip
reverse_proxy localhost:${toString config.services.goatcounter.port}
'';
+
+ "repo.hpcesia.com".extraConfig = ''
+ encode zstd gzip
+ reverse_proxy http://localhost:${toString config.services.forgejo.settings.server.HTTP_PORT}
+ '';
};
};
}
modules/hosts/pardofelis/services/default.nix
@@ -4,6 +4,8 @@ in {
den.aspects.pardofelis.includes = [
<services/fail2ban>
+ <services/forgejo>
+
<services/forgejo-runner>
(<services/forgejo-runner/instance> {
instance = "local";
modules/hosts/pardofelis/default.nix
@@ -42,7 +42,6 @@
[
"artalk"
"authelia"
- "forgejo"
"freshrss"
"gokapi"
"homepage"
modules/services/forgejo/default.nix
@@ -1,5 +1,5 @@
-{lib, ...}: {
- flake.modules.nixos."services/forgejo" = {
+{
+ den.aspects.services.provides.forgejo.nixos = {
config,
pkgs,
...
@@ -71,15 +71,6 @@
config.services.forgejo.settings.server.SSH_PORT
];
- services.caddy.virtualHosts."repo.hpcesia.com".extraConfig =
- lib.mkIf config.services.caddy.enable
- (let
- localAddress = "http://localhost:${builtins.toString config.services.forgejo.settings.server.HTTP_PORT}";
- in ''
- encode zstd gzip
- reverse_proxy ${localAddress}
- '');
-
vaultix.secrets.forgejo-mailer-password = {
file = ./mailer-password.age;
owner = "root";
modules/services/forgejo/fail2ban.nix
@@ -1,5 +1,5 @@
{lib, ...}: {
- flake.modules.nixos."services/forgejo" = {config, ...}:
+ den.aspects.services.provides.forgejo.nixos = {config, ...}:
lib.mkIf config.services.fail2ban.enable {
services.fail2ban.jails.forgejo-ssh = {
settings = {