nix-dotfiles/hosts/tsuki/services/gitea/default.nix

148 lines
3.7 KiB
Nix
Raw Normal View History

{ config, pkgs, unstable-pkgs, lib, secrets, ... }:
2022-03-07 16:01:52 +01:00
{
security.pam.services."gitea".unixAuth = true;
users.users.git = {
description = "Gitea service";
home = config.services.gitea.stateDir;
useDefaultShell = true;
2022-03-07 16:01:52 +01:00
group = "gitea";
isSystemUser = true;
uid = config.ids.uids.git;
packages = with unstable-pkgs; [ gitea ];
2022-03-07 16:01:52 +01:00
};
sops.secrets."postgres/gitea" = rec {
restartUnits = [ "gitea.service" ];
owner = config.services.gitea.user;
group = config.users.users.${owner}.group;
};
2022-03-07 16:01:52 +01:00
services.gitea = {
enable = true;
user = "git";
rootUrl = "https://git.nani.wtf/";
domain = "git.nani.wtf";
httpPort = secrets.ports.gitea;
package = unstable-pkgs.gitea;
stateDir = "${config.machineVars.dataDrives.default}/var/gitea";
dump = {
enable = true;
interval = "weekly";
};
2022-03-07 16:01:52 +01:00
database = {
type = "postgres";
user = "gitea";
passwordFile = config.sops.secrets."postgres/gitea".path;
createDatabase = false;
2022-03-07 16:01:52 +01:00
};
settings = {
server = {
BUILTIN_SSH_SERVER_USER="git";
LANDING_PAGE = "/explore/repos";
2022-03-07 16:01:52 +01:00
};
service.DISABLE_REGISTRATION = true;
session.COOKIE_SECURE = true;
2023-03-07 23:20:19 +01:00
oauth2_client = {
ENABLE_AUTO_REGISTRATION = true;
OPENID_CONNECT_SCOPES = "email profile";
UPDATE_AVATAR = true;
ACCOUNT_LINKING = "auto";
USERNAME = "userid";
};
log.LEVEL = "Info";
database.LOG_SQL = false;
repository.DISABLE_STARS = true;
2022-03-22 16:44:11 +01:00
ui = {
DEFAULT_THEME = "monokai";
2022-03-22 16:44:11 +01:00
THEMES = lib.strings.concatStringsSep "," [
"gitea"
"arc-green"
# Custom
"monokai"
2022-03-22 16:44:11 +01:00
];
};
2022-10-14 00:02:19 +02:00
"ui.svg".RENDER = true;
2022-03-07 16:01:52 +01:00
indexer.REPO_INDEXER_ENABLED = true;
mailer = {
ENABLED = true;
FROM = "gitea@nani.wtf";
};
2022-10-14 00:02:19 +02:00
# Looking forward to the day I can uncomment this line
# federation.ENABLED = true;
packages.ENABLED = false;
2022-03-22 16:44:11 +01:00
# TODO: fix
2022-03-07 16:01:52 +01:00
# markup = let
# docutils = pkgs.python37.withPackages (ps: with ps; [
# docutils # Provides rendering of ReStructured Text files
# pygments # Provides syntax highlighting
# ]);
# in {
# restructuredtext = {
# ENABLED = true;
# FILE_EXTENSIONS = ".rst";
# RENDER_COMMAND = "${docutils}/bin/rst2html.py";
# IS_INPUT_FILE = false;
# };
# asciidoc = {
# ENABLED = true;
# FILE_EXTENSIONS = ".adoc,.asciidoc";
# RENDER_COMMAND = "${pkgs.asciidoctor}/bin/asciidoctor -e -a leveloffset=-1 --out-file=- -";
# IS_INPUT_FILE = false;
# };
# };
};
};
system.activationScripts.linkGiteaThemes.text = let
themes = pkgs.stdenv.mkDerivation {
pname = "gitea-themes";
version = "1.0.0";
src = ./themes;
buildInputs = with pkgs; [ lessc ];
buildPhase = ''
mkdir out
for f in $(find -name 'theme-*.less')
do
lessc $f out/''${f%.less}.css
done;
'';
installPhase = "mv out $out";
};
cssParentPath = "${config.services.gitea.stateDir}/custom/public";
cssPath = "${cssParentPath}/css";
in ''
if [[ ! -e "${cssPath}" ]]; then
printf "creating symlink at %s...\n" "${cssPath}"
mkdir -p "${cssParentPath}"
ln -s "${themes}" "${cssPath}"
elif [ -L "${cssPath}" ]; then
printf "replacing symlink at %s...\n" "${cssPath}"
rm ${cssPath}
ln -s "${themes}" "${cssPath}"
else
printf "ERROR: %s already exists and it is not a symlink\n" "${cssPath}"
_localstatus=1;
fi
'';
2022-03-07 16:01:52 +01:00
}