nix/hosts/marvin/services/gitea.nix

{
  services.gitea = {
    enable = true;
    domain = "git.thehedgehog.me";
    rootUrl = "https://git.thehedgehog.me";
    appName = "HedgeGit";
    httpPort = 3001;
    ssh.enable = false;
    lfs.enable = true;
    cookieSecure = true;
    database.type = "postgres";
    database.createDatabase = true;
    database.passwordFile = "/run/agenix/gitea-db-pw";
    mailerPasswordFile = "/run/agenix/gitea-mail-pw";
    settings = {
      mailer = {
        ENABLED = true;
        FROM = "git@thehedgehog.me";
        MAILER_TYPE = "smtp";
        HOST = "smtp.migadu.com:465";
        IS_TLS_ENABLED = true;
        USER = "git@thehedgehog.me";
      };
      picture = {
        ENABLE_FEDERATED_AVATAR = true;
      };
    };
  };
}