nix/hosts/marvin/services/gitea.nix

{
  services.gitea = {
    enable = true;
    domain = "git.thehedgehog.me";
    rootUrl = "https://git.thehedgehog.me";
    appName = "HedgeGit";
    httpPort = 6904;
    lfs.enable = true;
    database.type = "postgres";
    database.createDatabase = true;
    database.passwordFile = "/run/agenix/gitea-db-pw";
    mailerPasswordFile = "/run/agenix/gitea-mail-pw";
    settings = {
      mailer = {
        ENABLED = true;
        FROM = "git@thehedgehog.me";
        MAILER_TYPE = "smtp";
        HOST = "smtp.migadu.com:465";
        IS_TLS_ENABLED = true;
        USER = "git@thehedgehog.me";
      };
      picture = {
        ENABLE_FEDERATED_AVATAR = true;
      };
      ui = {
        THEMES = "gitea,arc-green,plex,aquamarine,dark,dracula,hotline,organizr,space-gray,hotpink,onedark,overseerr,nord,tokyo-night";
        DEFAULT_THEME = "gitea";
      };
      metrics = {
        ENABLED = true;
      };
      server = {
        DISABLE_SSH = true;
      };
      session = {
        COOKIE_SECURE = true;
      };
      service = {
        DISABLE_REGISTRATION = true;
      };
    };
  };
}