From 2702decc9470cf0f553eb957145bdcda9e95e0bc Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Thu, 8 Jan 2026 09:44:54 -0600
Subject: clean up networking and selfhosted apps configuration

---
 modules/services/nixos/selfhost/forgejo.nix | 33 +++++++++++++++++++++++++++--
 1 file changed, 31 insertions(+), 2 deletions(-)

(limited to 'modules/services/nixos/selfhost/forgejo.nix')

diff --git a/modules/services/nixos/selfhost/forgejo.nix b/modules/services/nixos/selfhost/forgejo.nix
index 73fbdaa..b1a6095 100644
--- a/modules/services/nixos/selfhost/forgejo.nix
+++ b/modules/services/nixos/selfhost/forgejo.nix
@@ -12,9 +12,38 @@ in
       settings = {
         server = {
           DOMAIN = "localhost";
-          HTTP_PORT = 8010;
+          ROOT_URL = cfg.root_url;
+          HTTP_PORT = cfg.port;
+
+          # ssh
+          START_SSH_SERVER = true; # use builtin ssh server
+          BUILTIN_SSH_SERVER_USER = "git";
+          SSH_DOMAIN = "ganymede";
+          SSH_PORT = 2222; # don't conflict with system ssh
+          SSH_LISTEN_HOST = cfg.bind_host;
+          SSH_LISTEN_PORT = 2222;
+        };
+        service = {
+          DISABLE_REGISTRATION = false;
+          ENABLE_REVERSE_PROXY_AUTHENTICATION = true;
+        };
+        repository = {
+          # disable stuff
+          DISABLE_MIGRATIONS = true;
+          DISABLE_STARS = true;
+          DISABLE_DOWNLOAD_SOURCE_ARCHIVES = true;
         };
-        service.DISABLE_REGISTRATION = false;
       };
     };
+
+    services.caddy = lib.mkIf config.collinux.services.selfhost.caddy.enable {
+      virtualHosts.${cfg.root_url}.extraConfig = ''
+        ${
+          if config.collinux.services.networking.tailscale.enable
+          then "bind tailscale/forgejo"
+          else ""
+        }
+        reverse_proxy localhost:${toString cfg.port}
+      '';
+    };
   }
-- 
cgit v1.3.1