Add Forgejo git hosting

modules/nixos/default.nix

@@ -1,7 +1,7 @@
 {
   imports = [
     ./copyparty.nix
-    # ./forgejo.nix
+    ./forgejo.nix
     ./immich.nix
     ./jellyfin.nix
     # ./minecraft.nix

modules/nixos/forgejo.nix

@@ -1,58 +1,22 @@
-{ inputs, ... }:
+{ config, ... }:
 {
-  containers.git = {
+  services = {
-    autoStart = true;
+    forgejo = {
-    bindMounts."/etc/ssh/ssh_host_ed25519_key".hostPath = "/etc/ssh/ssh_host_ed25519_key";
+      enable = true;
-
+      database.type = "postgres";
-    config = {
+      lfs.enable = true;
-      imports = [ inputs.agenix.nixosModules.default ];
+      settings = {
-
+        service.DISABLE_REGISTRATION = true;
-      age = {
+        server = {
-        identityPaths = [ "/etc/ssh/ssh_host_ed25519_key" ];
+          DOMAIN = "git.alpine-centauri.ts.net";
-        secrets."forgejo-runner-token" = {
+          ROOT_URL = "https://${config.services.forgejo.settings.server.DOMAIN}";
-          file = ../secrets/forgejo-runner-token.age;
+          # HTTP_PORT = 3000;
-          mode = "400";
+        };
-          owner = "forgejo";
+        actions = {
+          ENABLED = true;
+          DEFAULT_ACTIONS_URL = "github";
         };
       };
-
-      services = {
-        forgejo = {
-          enable = true;
-          database.type = "postgres";
-          lfs.enable = true;
-          settings = {
-            server = {
-              DOMAIN = "git.alpine-centauri.ts.net";
-              ROOT_URL = "https://git.alpine-centauri.ts.net/";
-              HTTP_PORT = 3000;
-            };
-            actions = {
-              ENABLED = true;
-              DEFAULT_ACTIONS_URL = "https://code.forgejo.org";
-            };
-          };
-        };
-
-        # gitea-actions-runner = {
-        #   package = pkgs.forgejo-runner;
-        #   instances.native = {
-        #     enable = true;
-        #     name = "native";
-        #     url = "https://git.alpine-centauri.ts.net";
-        #     tokenFile = config.age.secrets.forgejo-runner-token.path;
-        #     labels = [ "native:host" ];
-        #   };
-        # };
-
-        tailscale = {
-          enable = true;
-          useRoutingFeatures = "server";
-          interfaceName = "userspace-networking";
-        };
-      };
-
-      system.stateVersion = "24.05";
     };
   };
 }

modules/secrets/secrets.nix

@@ -8,7 +8,6 @@ let
 in
 {
   "copyparty-jan.age".publicKeys = all;
-  "forgejo-runner-token.age".publicKeys = all;
   "paperless-admin.age".publicKeys = all;
   "tailscale.age".publicKeys = all;
 }