113 lines
2.2 KiB
Nix
113 lines
2.2 KiB
Nix
{ config, pkgs, ... }:
|
|
let
|
|
gitHome = "/srv/git.gebner.org";
|
|
|
|
gogs = pkgs.callPackage ../pkgs/gogs.nix { };
|
|
|
|
gogsPort = 8001;
|
|
gogsConfig = pkgs.writeText "gogs.ini" ''
|
|
APP_NAME = Gogs: Go Git Service
|
|
RUN_USER = git
|
|
RUN_MODE = prod
|
|
|
|
[database]
|
|
DB_TYPE = sqlite3
|
|
HOST = 127.0.0.1:3306
|
|
NAME = gogs
|
|
USER = root
|
|
PASSWD =
|
|
SSL_MODE = disable
|
|
PATH = ${gitHome}/data/gogs.db
|
|
|
|
[repository]
|
|
ROOT = ${gitHome}/gogs-repositories
|
|
|
|
[server]
|
|
DOMAIN = git.gebner.org
|
|
HTTP_PORT = ${toString gogsPort}
|
|
ROOT_URL = https://git.gebner.org/
|
|
DISABLE_SSH = false
|
|
SSH_PORT = 22
|
|
OFFLINE_MODE = true
|
|
|
|
[mailer]
|
|
ENABLED = false
|
|
|
|
[service]
|
|
REGISTER_EMAIL_CONFIRM = false
|
|
ENABLE_NOTIFY_MAIL = false
|
|
DISABLE_REGISTRATION = true
|
|
REQUIRE_SIGNIN_VIEW = false
|
|
|
|
[picture]
|
|
DISABLE_GRAVATAR = false
|
|
|
|
[session]
|
|
PROVIDER = file
|
|
|
|
[log]
|
|
ROOT_PATH = ${gitHome}/logs
|
|
MODE = file
|
|
LEVEL = Info
|
|
|
|
[security]
|
|
INSTALL_LOCK = true
|
|
'';
|
|
in
|
|
{
|
|
users.extraUsers.git = { home = gitHome; extraGroups = [ "git" ]; };
|
|
users.extraGroups.git = { };
|
|
|
|
systemd.services.gogs = {
|
|
path = with pkgs; [ git openssh ];
|
|
wantedBy = [ "multi-user.target" ];
|
|
serviceConfig = {
|
|
Type = "simple";
|
|
Restart = "always";
|
|
User = "git";
|
|
Group = "git";
|
|
ExecStart = "${gogs}/gogs web -c ${gogsConfig}";
|
|
WorkingDirectory = gitHome;
|
|
};
|
|
};
|
|
|
|
services.nginx.appendConfig = ''
|
|
http {
|
|
server {
|
|
listen [::]:80;
|
|
listen 80;
|
|
server_name git.gebner.org;
|
|
|
|
rewrite ^(.*) https://$host$1 permanent;
|
|
}
|
|
|
|
server {
|
|
listen [::]:443;
|
|
listen 443;
|
|
server_name git.gebner.org;
|
|
|
|
ssl on;
|
|
ssl_certificate_key /etc/sslcerts/mastus.key;
|
|
ssl_certificate /etc/sslcerts/git.cert;
|
|
|
|
location / {
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header X-Forwarded-Server $host;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header Host $http_host;
|
|
proxy_redirect off;
|
|
proxy_buffering off;
|
|
proxy_pass http://gogs;
|
|
client_max_body_size 30M;
|
|
break;
|
|
}
|
|
}
|
|
|
|
upstream gogs {
|
|
server 127.0.0.1:${toString gogsPort};
|
|
}
|
|
}
|
|
'';
|
|
}
|