2005
9216cbbf62
added logging to all nginx routes
added loki, promtail to scrape nginx logs
turned i2pd back on,
updated my websites version
upgraded all hosts to 24.05
forgejo added bigger limit to upload limit due to docker images
privacy frontends:
added priviblur
libreddit -> redlib
added biblioreads
ddns-updater, changed credentials but there is a bug with porkbun
added penpot
brought back anonymousoverflow
added readme privacy respecting frontends
56 lines
1.4 KiB
Nix
56 lines
1.4 KiB
Nix
{ pkgs, config, ... }:
|
|
{
|
|
services.forgejo = {
|
|
enable = true;
|
|
settings = {
|
|
server = {
|
|
DOMAIN = "git.4o1x5.dev";
|
|
ROOT_URL = "https://git.${config.networking.domain}/";
|
|
DISABLE_REGISTRATION = true;
|
|
DISABLE_SSH = true;
|
|
};
|
|
DEFAULT.APP_NAME = "2005's git server";
|
|
actions.ENABLED = true;
|
|
};
|
|
database = {
|
|
type = "postgres";
|
|
createDatabase = true;
|
|
};
|
|
};
|
|
|
|
services.nginx = {
|
|
virtualHosts = {
|
|
"git.${config.networking.domain}" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = " http://127.0.0.1:3000";
|
|
};
|
|
extraConfig = ''
|
|
client_max_body_size 8192M;
|
|
access_log /var/log/nginx/$server_name-access.log json_analytics;
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
|
|
services.gitea-actions-runner.instances = {
|
|
root = {
|
|
enable = true;
|
|
url = "https://git.${config.networking.domain}";
|
|
tokenFile = config.age.secrets.forgejo-runner.path;
|
|
settings = {
|
|
container = {
|
|
# TODO fix: networking
|
|
# instead of using host, create a subnet that cannot contact other server on my network to avoid being haxxed
|
|
network = "host";
|
|
};
|
|
};
|
|
labels = [
|
|
"ubuntu-latest:docker://gitea/runner-images:ubuntu-latest"
|
|
];
|
|
name = config.networking.domain;
|
|
};
|
|
};
|
|
}
|