From 949a8d3d9c34306ca5f9719014db0d7f946a919c Mon Sep 17 00:00:00 2001 From: Jan Kremer Date: Thu, 26 Mar 2026 19:01:09 +0100 Subject: [PATCH 01/10] Redirect jankremer.eu to jankremer.de --- modules/nixos/website.nix | 32 +++++++++++++++++++------------- 1 file changed, 19 insertions(+), 13 deletions(-) diff --git a/modules/nixos/website.nix b/modules/nixos/website.nix index 59558a1..e541f15 100644 --- a/modules/nixos/website.nix +++ b/modules/nixos/website.nix @@ -3,22 +3,28 @@ "d /var/www/jankremer.de 755 jan users -" ]; - services.caddy.virtualHosts."jankremer.de".extraConfig = '' - handle { - root * /var/www/jankremer.de - file_server + services.caddy.virtualHosts = { + "jankremer.de".extraConfig = '' + handle { + root * /var/www/jankremer.de + file_server - @static { - path *.css *.js *.woff2 *.woff *.ttf *.png *.jpg *.jpeg *.svg *.ico *.webp - } - header @static Cache-Control "public, max-age=31536000, immutable" + @static { + path *.css *.js *.woff2 *.woff *.ttf *.png *.jpg *.jpeg *.svg *.ico *.webp + } + header @static Cache-Control "public, max-age=31536000, immutable" - @html { - path *.html + @html { + path *.html + } + header @html Cache-Control "no-cache" } - header @html Cache-Control "no-cache" - } - ''; + ''; + + "jankremer.eu".extraConfig = '' + redir https://jankremer.de{uri} permanent + ''; + }; networking.firewall.allowedTCPPorts = [ 80 From 3a561cd1aaf9b54d295ebca53b04583666bedbcd Mon Sep 17 00:00:00 2001 From: Jan Kremer Date: Fri, 27 Mar 2026 06:56:41 +0100 Subject: [PATCH 02/10] Add 1 GB swap to nimbus --- hosts/nimbus/configuration.nix | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/hosts/nimbus/configuration.nix b/hosts/nimbus/configuration.nix index b7c4df4..b3dfd9b 100644 --- a/hosts/nimbus/configuration.nix +++ b/hosts/nimbus/configuration.nix @@ -22,6 +22,13 @@ zramSwap.enable = true; + swapDevices = [ + { + device = "/swapfile"; + size = 1 * 1024; # 1GB + } + ]; + security.sudo.extraConfig = '' Defaults lecture = never Defaults pwfeedback From 11d6faae707f6b57dc4db3425f4ed78d4285b1ba Mon Sep 17 00:00:00 2001 From: Jan Kremer Date: Fri, 27 Mar 2026 07:19:52 +0100 Subject: [PATCH 03/10] Handle 404 in Caddy --- modules/nixos/matrix.nix | 36 ++++++++++++++++++---------------- modules/nixos/website.nix | 41 +++++++++++++++++++++++---------------- 2 files changed, 43 insertions(+), 34 deletions(-) diff --git a/modules/nixos/matrix.nix b/modules/nixos/matrix.nix index 677859d..eb696d2 100644 --- a/modules/nixos/matrix.nix +++ b/modules/nixos/matrix.nix @@ -23,27 +23,29 @@ ## Matrix federation virtualHosts = { "jankremer.de:8448" = { - extraConfig = '' - reverse_proxy localhost:6167 - ''; + extraConfig = # caddyfile + '' + reverse_proxy localhost:6167 + ''; }; "jankremer.de" = { - extraConfig = '' - handle /_matrix/* { - reverse_proxy localhost:6167 - } + extraConfig = # caddyfile + '' + handle /_matrix/* { + reverse_proxy localhost:6167 + } - handle /.well-known/matrix/server { - header Content-Type application/json - respond `{"m.server": "jankremer.de:443"}` 200 - } + handle /.well-known/matrix/server { + header Content-Type application/json + respond `{"m.server": "jankremer.de:443"}` 200 + } - handle /.well-known/matrix/client { - header Content-Type application/json - header Access-Control-Allow-Origin * - respond `{"m.homeserver": {"base_url": "https://jankremer.de"}}` 200 - } - ''; + handle /.well-known/matrix/client { + header Content-Type application/json + header Access-Control-Allow-Origin * + respond `{"m.homeserver": {"base_url": "https://jankremer.de"}}` 200 + } + ''; }; }; }; diff --git a/modules/nixos/website.nix b/modules/nixos/website.nix index e541f15..37bd1b2 100644 --- a/modules/nixos/website.nix +++ b/modules/nixos/website.nix @@ -4,26 +4,33 @@ ]; services.caddy.virtualHosts = { - "jankremer.de".extraConfig = '' - handle { - root * /var/www/jankremer.de - file_server + "jankremer.de".extraConfig = # caddyfile + '' + handle { + root * /var/www/jankremer.de + file_server - @static { - path *.css *.js *.woff2 *.woff *.ttf *.png *.jpg *.jpeg *.svg *.ico *.webp + @static { + path *.css *.js *.woff2 *.woff *.ttf *.png *.jpg *.jpeg *.svg *.ico *.webp + } + header @static Cache-Control "public, max-age=31536000, immutable" + + @html { + path *.html + } + header @html Cache-Control "no-cache" + + handle_errors { + rewrite * /404.html + file_server + } } - header @static Cache-Control "public, max-age=31536000, immutable" + ''; - @html { - path *.html - } - header @html Cache-Control "no-cache" - } - ''; - - "jankremer.eu".extraConfig = '' - redir https://jankremer.de{uri} permanent - ''; + "jankremer.eu".extraConfig = # caddyfile + '' + redir https://jankremer.de{uri} permanent + ''; }; networking.firewall.allowedTCPPorts = [ From 0df36891b1df3b36eda6c23176bbe8fdeea505cc Mon Sep 17 00:00:00 2001 From: Jan Kremer Date: Fri, 27 Mar 2026 07:37:25 +0100 Subject: [PATCH 04/10] Rextract caddy config --- hosts/nimbus/configuration.nix | 2 +- modules/nixos/caddy.nix | 64 ++++++++++++++++++++++++++++++++++ modules/nixos/matrix.nix | 38 -------------------- modules/nixos/website.nix | 40 --------------------- 4 files changed, 65 insertions(+), 79 deletions(-) create mode 100644 modules/nixos/caddy.nix delete mode 100644 modules/nixos/website.nix diff --git a/hosts/nimbus/configuration.nix b/hosts/nimbus/configuration.nix index b3dfd9b..6a15891 100644 --- a/hosts/nimbus/configuration.nix +++ b/hosts/nimbus/configuration.nix @@ -9,8 +9,8 @@ inputs.agenix.nixosModules.default ./hardware-configuration.nix ../../modules/nixos/tailscale.nix + ../../modules/nixos/caddy.nix ../../modules/nixos/matrix.nix - ../../modules/nixos/website.nix ]; # Workaround for https://github.com/NixOS/nix/issues/8502 diff --git a/modules/nixos/caddy.nix b/modules/nixos/caddy.nix new file mode 100644 index 0000000..4c3b5d2 --- /dev/null +++ b/modules/nixos/caddy.nix @@ -0,0 +1,64 @@ +{ + systemd.tmpfiles.rules = [ + "d /var/www/jankremer.de 755 jan users -" + ]; + + services.caddy = { + enable = true; + virtualHosts = { + "jankremer.de:8448".extraConfig = # caddyfile + '' + reverse_proxy localhost:6167 + ''; + + "jankremer.de".extraConfig = # caddyfile + '' + handle /_matrix/* { + reverse_proxy localhost:6167 + } + + handle /.well-known/matrix/server { + header Content-Type application/json + respond `{"m.server": "jankremer.de:443"}` 200 + } + + handle /.well-known/matrix/client { + header Content-Type application/json + header Access-Control-Allow-Origin * + respond `{"m.homeserver": {"base_url": "https://jankremer.de"}}` 200 + } + + handle { + root * /var/www/jankremer.de + file_server + + @static { + path *.css *.js *.woff2 *.woff *.ttf *.png *.jpg *.jpeg *.svg *.ico *.webp + } + header @static Cache-Control "public, max-age=31536000, immutable" + + @html { + path *.html + } + header @html Cache-Control "no-cache" + } + + handle_errors { + rewrite * /404.html + file_server + } + ''; + + "jankremer.eu".extraConfig = # caddyfile + '' + redir https://jankremer.de{uri} permanent + ''; + }; + }; + + networking.firewall.allowedTCPPorts = [ + 80 + 443 + 8448 + ]; +} diff --git a/modules/nixos/matrix.nix b/modules/nixos/matrix.nix index eb696d2..379a790 100644 --- a/modules/nixos/matrix.nix +++ b/modules/nixos/matrix.nix @@ -17,42 +17,4 @@ }; }; }; - - services.caddy = { - enable = true; - ## Matrix federation - virtualHosts = { - "jankremer.de:8448" = { - extraConfig = # caddyfile - '' - reverse_proxy localhost:6167 - ''; - }; - "jankremer.de" = { - extraConfig = # caddyfile - '' - handle /_matrix/* { - reverse_proxy localhost:6167 - } - - handle /.well-known/matrix/server { - header Content-Type application/json - respond `{"m.server": "jankremer.de:443"}` 200 - } - - handle /.well-known/matrix/client { - header Content-Type application/json - header Access-Control-Allow-Origin * - respond `{"m.homeserver": {"base_url": "https://jankremer.de"}}` 200 - } - ''; - }; - }; - }; - - networking.firewall.allowedTCPPorts = [ - 80 - 443 - 8448 - ]; } diff --git a/modules/nixos/website.nix b/modules/nixos/website.nix deleted file mode 100644 index 37bd1b2..0000000 --- a/modules/nixos/website.nix +++ /dev/null @@ -1,40 +0,0 @@ -{ - systemd.tmpfiles.rules = [ - "d /var/www/jankremer.de 755 jan users -" - ]; - - services.caddy.virtualHosts = { - "jankremer.de".extraConfig = # caddyfile - '' - handle { - root * /var/www/jankremer.de - file_server - - @static { - path *.css *.js *.woff2 *.woff *.ttf *.png *.jpg *.jpeg *.svg *.ico *.webp - } - header @static Cache-Control "public, max-age=31536000, immutable" - - @html { - path *.html - } - header @html Cache-Control "no-cache" - - handle_errors { - rewrite * /404.html - file_server - } - } - ''; - - "jankremer.eu".extraConfig = # caddyfile - '' - redir https://jankremer.de{uri} permanent - ''; - }; - - networking.firewall.allowedTCPPorts = [ - 80 - 443 - ]; -} From 888cf87c0f53c97f7b43970d5773893b4bc1b7a1 Mon Sep 17 00:00:00 2001 From: Jan Kremer Date: Fri, 27 Mar 2026 08:28:35 +0100 Subject: [PATCH 05/10] Remove default nixos module --- hosts/galanthus/configuration.nix | 9 ++++++++- hosts/nimbus/configuration.nix | 2 ++ modules/nixos/default.nix | 12 ------------ 3 files changed, 10 insertions(+), 13 deletions(-) delete mode 100644 modules/nixos/default.nix diff --git a/hosts/galanthus/configuration.nix b/hosts/galanthus/configuration.nix index bd955ed..4335df4 100644 --- a/hosts/galanthus/configuration.nix +++ b/hosts/galanthus/configuration.nix @@ -9,8 +9,15 @@ imports = [ inputs.agenix.nixosModules.default inputs.copyparty.nixosModules.default + ./hardware-configuration.nix - ../../modules/nixos + + ../../modules/nixos/tailscale.nix + ../../modules/nixos/jellyfin.nix + ../../modules/nixos/immich.nix + ../../modules/nixos/paperless.nix + ../../modules/nixos/copyparty.nix + ../../modules/nixos/samba.nix ]; boot = { diff --git a/hosts/nimbus/configuration.nix b/hosts/nimbus/configuration.nix index 6a15891..7200217 100644 --- a/hosts/nimbus/configuration.nix +++ b/hosts/nimbus/configuration.nix @@ -7,7 +7,9 @@ { imports = [ inputs.agenix.nixosModules.default + ./hardware-configuration.nix + ../../modules/nixos/tailscale.nix ../../modules/nixos/caddy.nix ../../modules/nixos/matrix.nix diff --git a/modules/nixos/default.nix b/modules/nixos/default.nix deleted file mode 100644 index a30a033..0000000 --- a/modules/nixos/default.nix +++ /dev/null @@ -1,12 +0,0 @@ -{ - imports = [ - ./copyparty.nix - # ./forgejo.nix - ./immich.nix - ./jellyfin.nix - # ./minecraft.nix - ./paperless.nix - ./samba.nix - ./tailscale.nix - ]; -} From ea2a2d81e5e1a996e8eb958953198faaa5ee8ef9 Mon Sep 17 00:00:00 2001 From: Jan Kremer Date: Fri, 27 Mar 2026 10:33:19 +0100 Subject: [PATCH 06/10] Deploy forgejo on nimbus --- hosts/nimbus/configuration.nix | 1 + modules/nixos/caddy.nix | 5 +++++ modules/nixos/forgejo.nix | 27 ++++++++++++++++++++++----- modules/secrets/forgejo-mailer.age | 9 +++++++++ modules/secrets/secrets.nix | 2 ++ 5 files changed, 39 insertions(+), 5 deletions(-) create mode 100644 modules/secrets/forgejo-mailer.age diff --git a/hosts/nimbus/configuration.nix b/hosts/nimbus/configuration.nix index 7200217..e8e7af2 100644 --- a/hosts/nimbus/configuration.nix +++ b/hosts/nimbus/configuration.nix @@ -13,6 +13,7 @@ ../../modules/nixos/tailscale.nix ../../modules/nixos/caddy.nix ../../modules/nixos/matrix.nix + ../../modules/nixos/forgejo.nix ]; # Workaround for https://github.com/NixOS/nix/issues/8502 diff --git a/modules/nixos/caddy.nix b/modules/nixos/caddy.nix index 4c3b5d2..c21e9c8 100644 --- a/modules/nixos/caddy.nix +++ b/modules/nixos/caddy.nix @@ -49,6 +49,11 @@ } ''; + "git.jankremer.de".extraConfig = # caddyfile + '' + reverse_proxy localhost:3000 + ''; + "jankremer.eu".extraConfig = # caddyfile '' redir https://jankremer.de{uri} permanent diff --git a/modules/nixos/forgejo.nix b/modules/nixos/forgejo.nix index 654ce26..29d9825 100644 --- a/modules/nixos/forgejo.nix +++ b/modules/nixos/forgejo.nix @@ -1,5 +1,13 @@ { config, ... }: +let + domain = "git.jankremer.de"; +in { + age.secrets.forgejo-mailer = { + file = ../../modules/secrets/forgejo-mailer.age; + owner = "forgejo"; + }; + services = { forgejo = { enable = true; @@ -8,14 +16,23 @@ settings = { service.DISABLE_REGISTRATION = true; server = { - DOMAIN = "git.alpine-centauri.ts.net"; - ROOT_URL = "https://${config.services.forgejo.settings.server.DOMAIN}"; - HTTP_PORT = 3010; + DOMAIN = domain; + ROOT_URL = "https://${domain}"; + START_SSH_SERVER = false; + SSH_PORT = 22; }; - actions = { + mailer = { ENABLED = true; - DEFAULT_ACTIONS_URL = "github"; + SMTP_ADDR = "smtp.mail.me.com"; + SMTP_PORT = 587; + FROM = "git@jankremer.de"; + USER = "janurskremer@me.com"; + PASSWD_URI = "file:${config.age.secrets.forgejo-mailer.path}"; }; + # actions = { + # ENABLED = true; + # DEFAULT_ACTIONS_URL = "github"; + # }; }; }; }; diff --git a/modules/secrets/forgejo-mailer.age b/modules/secrets/forgejo-mailer.age new file mode 100644 index 0000000..d5eeb84 --- /dev/null +++ b/modules/secrets/forgejo-mailer.age @@ -0,0 +1,9 @@ +age-encryption.org/v1 +-> ssh-ed25519 2otpcg 3/3V9NuhhEEvC5Czd52LroF3gb+5R8kVMwUQEdjQPz4 +W69B15eEI4+0v+TRKzS9mCs1+Gwjd2XeS9lykr5pxyQ +-> ssh-ed25519 40YjXQ Ie0rCVXk2DtsE/V8pcL3o7UXD1U/1Ag/knDrDOr0REw +Zuc42+JOtssFl7puQvHRdLuPpA51qgykiQ9/9xJlSK0 +-> ssh-ed25519 wbs2Dw qwhCUJQmXljIcEO8ysfSFpFPWqdmW5ysMhYxEW9QmUU +w5nSiL+pAX36RG2A/V4QijFjqVzIZ+5/HsbS/C2I8S0 +--- Rm8JLyJwpZp1BBfARjKFz7vnJjGagN1VOgpHSmI7zDU +‚C_.¹¡Ìâ"׋: `F…ƒ­U¤Ø_ÀŒ_)ÚžŸkRÉ7|I.b ±áö)4: \ No newline at end of file diff --git a/modules/secrets/secrets.nix b/modules/secrets/secrets.nix index 6a3e41e..9b47379 100644 --- a/modules/secrets/secrets.nix +++ b/modules/secrets/secrets.nix @@ -2,6 +2,7 @@ let malus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPTpgedzJ7vs3GMOjUeQGkAzGhNZRhvMMz9Z1whaWieE"; galanthus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIZYQao2OKQxyic+I327VZ7lQECh9hSS9cgsls3e/a1u"; nimbus = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDIjr3r9RVTzMPNvfBWxVei8aGMlay3smMhhuGxEMRaj"; + all = [ malus galanthus @@ -13,4 +14,5 @@ in "paperless-admin.age".publicKeys = all; "tailscale.age".publicKeys = all; "matrix-registration-token.age".publicKeys = all; + "forgejo-mailer.age".publicKeys = all; } From 447fb84758183b12c0bfd198040bef0f843bfa04 Mon Sep 17 00:00:00 2001 From: Jan Kremer Date: Fri, 27 Mar 2026 20:58:35 +0100 Subject: [PATCH 07/10] flake.lock: Update MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Flake lock file updates: • Updated input 'copyparty': 'github:9001/copyparty/8a9066c35cd94226ee0e99d5d36e8b630ed8d2a3?narHash=sha256-QDBoepUZNQaIEvOqCGku6XjUp2sSh%2B7xamA8vNe9HlQ%3D' (2026-03-11) → 'github:9001/copyparty/26e663d111e39ca96c63702ad27a05b6736607cf?narHash=sha256-mceIHtVMXpLAfr1W0VK9ceTBX5yKu4gGWpVbThWTsAA%3D' (2026-03-25) • Updated input 'home-manager': 'github:nix-community/home-manager/3f98e2bbc661ec0aaf558d8a283d6955f05f1d09?narHash=sha256-EdW2bwzlfme0vbMOcStnNmKlOAA05Bp6su2O8VLGT0k%3D' (2026-03-10) → 'github:nix-community/home-manager/9df3a639007cfe0d074433f7fc225ea94f877d08?narHash=sha256-1WelwA45Xm4glTG8R9IX9jYeFKDG2HbR79jAauLezUE%3D' (2026-03-27) • Updated input 'nixpkgs': 'github:NixOS/nixpkgs/9dcb002ca1690658be4a04645215baea8b95f31d?narHash=sha256-9jVDGZnvCckTGdYT53d/EfznygLskyLQXYwJLKMPsZs%3D' (2026-03-08) → 'github:NixOS/nixpkgs/46db2e09e1d3f113a13c0d7b81e2f221c63b8ce9?narHash=sha256-4hAV26quOxdC6iyG7kYaZcM3VOskcPUrdCQd/nx8obc%3D' (2026-03-24) --- flake.lock | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/flake.lock b/flake.lock index adefc1b..3cc7b38 100644 --- a/flake.lock +++ b/flake.lock @@ -31,11 +31,11 @@ ] }, "locked": { - "lastModified": 1773190009, - "narHash": "sha256-QDBoepUZNQaIEvOqCGku6XjUp2sSh+7xamA8vNe9HlQ=", + "lastModified": 1774411715, + "narHash": "sha256-mceIHtVMXpLAfr1W0VK9ceTBX5yKu4gGWpVbThWTsAA=", "owner": "9001", "repo": "copyparty", - "rev": "8a9066c35cd94226ee0e99d5d36e8b630ed8d2a3", + "rev": "26e663d111e39ca96c63702ad27a05b6736607cf", "type": "github" }, "original": { @@ -129,11 +129,11 @@ ] }, "locked": { - "lastModified": 1773179137, - "narHash": "sha256-EdW2bwzlfme0vbMOcStnNmKlOAA05Bp6su2O8VLGT0k=", + "lastModified": 1774626137, + "narHash": "sha256-1WelwA45Xm4glTG8R9IX9jYeFKDG2HbR79jAauLezUE=", "owner": "nix-community", "repo": "home-manager", - "rev": "3f98e2bbc661ec0aaf558d8a283d6955f05f1d09", + "rev": "9df3a639007cfe0d074433f7fc225ea94f877d08", "type": "github" }, "original": { @@ -144,11 +144,11 @@ }, "nixpkgs": { "locked": { - "lastModified": 1772963539, - "narHash": "sha256-9jVDGZnvCckTGdYT53d/EfznygLskyLQXYwJLKMPsZs=", + "lastModified": 1774386573, + "narHash": "sha256-4hAV26quOxdC6iyG7kYaZcM3VOskcPUrdCQd/nx8obc=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "9dcb002ca1690658be4a04645215baea8b95f31d", + "rev": "46db2e09e1d3f113a13c0d7b81e2f221c63b8ce9", "type": "github" }, "original": { From 583a858015a2adc56ff5b51964ccd8f42622e52b Mon Sep 17 00:00:00 2001 From: Jan Kremer Date: Sat, 28 Mar 2026 11:37:27 +0100 Subject: [PATCH 08/10] Add forgejo mailer secret --- modules/nixos/forgejo.nix | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/modules/nixos/forgejo.nix b/modules/nixos/forgejo.nix index 29d9825..867188f 100644 --- a/modules/nixos/forgejo.nix +++ b/modules/nixos/forgejo.nix @@ -14,7 +14,7 @@ in database.type = "postgres"; lfs.enable = true; settings = { - service.DISABLE_REGISTRATION = true; + # service.DISABLE_REGISTRATION = true; server = { DOMAIN = domain; ROOT_URL = "https://${domain}"; @@ -27,13 +27,15 @@ in SMTP_PORT = 587; FROM = "git@jankremer.de"; USER = "janurskremer@me.com"; - PASSWD_URI = "file:${config.age.secrets.forgejo-mailer.path}"; }; # actions = { # ENABLED = true; # DEFAULT_ACTIONS_URL = "github"; # }; }; + secrets = { + mailer.PASSWD = config.age.secrets.forgejo-mailer.path; + }; }; }; } From a3a0b824b5f7280e4d1def1f5556c39c477cd804 Mon Sep 17 00:00:00 2001 From: Jan Kremer Date: Sat, 28 Mar 2026 11:44:43 +0100 Subject: [PATCH 09/10] Redirect git.jankremer.eu --- modules/nixos/caddy.nix | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/modules/nixos/caddy.nix b/modules/nixos/caddy.nix index c21e9c8..086c277 100644 --- a/modules/nixos/caddy.nix +++ b/modules/nixos/caddy.nix @@ -58,6 +58,11 @@ '' redir https://jankremer.de{uri} permanent ''; + + "git.jankremer.eu".extraConfig = # caddyfile + '' + redir https://git.jankremer.de{uri} permanent + ''; }; }; From f268e1e4621b2464c8705ac877cc408ad97eedfc Mon Sep 17 00:00:00 2001 From: Jan Kremer Date: Sat, 28 Mar 2026 11:47:59 +0100 Subject: [PATCH 10/10] Close git registration --- modules/nixos/forgejo.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/nixos/forgejo.nix b/modules/nixos/forgejo.nix index 867188f..75e748a 100644 --- a/modules/nixos/forgejo.nix +++ b/modules/nixos/forgejo.nix @@ -14,7 +14,7 @@ in database.type = "postgres"; lfs.enable = true; settings = { - # service.DISABLE_REGISTRATION = true; + service.DISABLE_REGISTRATION = true; server = { DOMAIN = domain; ROOT_URL = "https://${domain}";