From 25a87f24d91d1d9f9d2a3cd84d1c7b75657581aa Mon Sep 17 00:00:00 2001
From: Henrik Lissner <henrik@lissner.net>
Date: Sun, 31 Jan 2021 18:20:58 -0500
Subject: [PATCH] Reduce gitea logging & disable basic auth for api

- Disabled SQL logs because they quickly fill up the logs and aren't
  useful, currently. Also, smaller logs = easier job for fail2ban.
- Disabled basic auth because it's the least secure method of
  interacting with the gitea API. Tokens/oauth are better.
---
 modules/services/gitea.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/modules/services/gitea.nix b/modules/services/gitea.nix
index e2ef7b0a..a841a11e 100644
--- a/modules/services/gitea.nix
+++ b/modules/services/gitea.nix
@@ -38,7 +38,11 @@ in {
       cookieSecure = true;
       # Only log what's important, but Info is necessary for fail2ban to work
       log.level = "Info";
-      settings.server.DISABLE_ROUTER_LOG = true;
+      settings = {
+        server.DISABLE_ROUTER_LOG = true;
+        database.LOG_SQL = false;
+        service.ENABLE_BASIC_AUTHENTICATION = false;
+      };
     };
 
     services.fail2ban.jails.gitea = ''