helm/modules/services/gitea.nix
2020-12-31 19:34:11 -05:00

36 lines
739 B
Nix

{ options, config, lib, pkgs, ... }:
with lib;
with lib.my;
let cfg = config.modules.services.gitea;
in {
options.modules.services.gitea = {
enable = mkBoolOpt false;
};
config = mkIf cfg.enable {
# I prefer git@... ssh addresses over gitea@...
users.users.git = {
useDefaultShell = true;
home = "/var/lib/gitea";
group = "gitea";
};
services.gitea = {
enable = true;
user = "git";
database.user = "git";
disableRegistration = true;
# We're assuming SSL-only connectivity
cookieSecure = true;
# Only log what's important
log.level = "Error";
settings.server.DISABLE_ROUTER_LOG = true;
};
user.extraGroups = [ "gitea" ];
};
}