diff options
Diffstat (limited to 'modules/services/nixos/forgejo.nix')
| -rw-r--r-- | modules/services/nixos/forgejo.nix | 16 |
1 files changed, 13 insertions, 3 deletions
diff --git a/modules/services/nixos/forgejo.nix b/modules/services/nixos/forgejo.nix index 5c98633..1854f0f 100644 --- a/modules/services/nixos/forgejo.nix +++ b/modules/services/nixos/forgejo.nix @@ -1,5 +1,6 @@ { lib, + pkgs, config, ... }: let @@ -16,6 +17,7 @@ in { settings = { server = { DOMAIN = "localhost"; + PROTOCOL = "http"; ROOT_URL = cfg.root_url; HTTP_PORT = cfg.port; @@ -28,8 +30,8 @@ in { SSH_LISTEN_PORT = cfg.git_ssh_port; }; service = { - DISABLE_REGISTRATION = false; - ENABLE_REVERSE_PROXY_AUTHENTICATION = true; + DISABLE_REGISTRATION = true; + ENABLE_REVERSE_PROXY_AUTHENTICATION = false; }; repository = { # disable stuff @@ -40,9 +42,17 @@ in { }; }; - systemd.services."forgejo" = lib.mkIf config.collinux.services.networking.networkd.enable { + systemd.services."forgejo" = { after = lib.mkAfter ["network-online.target"]; wants = lib.mkAfter ["network-online.target"]; + + # Ensure users (https://wiki.nixos.org/wiki/Forgejo#Ensure_users) + preStart = let + adminCmd = "${lib.getExe pkgs.forgejo} admin user"; + passwd = config.collinux.secrets."collin-forgejo-password"; + in '' + ${adminCmd} create --admin --email "collin@ganymede" --username collin --password "$(tr -d '\n' < ${passwd.path})" || true + ''; }; }; } |