feat(compute01): Deploy opengist on gist.dgnum.eu

machines/nixos/compute01/_configuration.nix

@@ -29,6 +29,7 @@ lib.extra.mkConfig {
     # "netbox"
     "nextcloud"
     "ollama-proxy"
+    "opengist"
     "outline"
     "plausible"
     "postgresql"

machines/nixos/compute01/opengist.nix

@@ -0,0 +1,30 @@
+# SPDX-FileCopyrightText: 2025 Tom Hubrecht <tom.hubrecht@dgnum.eu>
+#
+# SPDX-License-Identifier: EUPL-1.2
+
+{ config, nixpkgs, ... }:
+
+let
+  host = "gist.dgnum.eu";
+in
+
+{
+  services.opengist = {
+    enable = true;
+
+    inherit host;
+
+    package = nixpkgs.nixos.unstable.opengist;
+
+    environmentFile = config.age.secrets."opengist-environment_file".path;
+
+    settings = {
+      gitea.url = "https://git.dgnum.eu";
+    };
+  };
+
+  services.nginx.virtualHosts.${host} = {
+    enableACME = true;
+    forceSSL = true;
+  };
+}

machines/nixos/compute01/secrets/secrets.nix

@@ -25,6 +25,7 @@
     "netbox-environment_file"
     "nextcloud-adminpass_file"
     "nextcloud-s3_secret_file"
+    "opengist-environment_file"
     "outline-oidc_client_secret_file"
     "outline-smtp_password_file"
     "outline-storage_secret_key_file"

meta/dns.nix

@@ -75,6 +75,7 @@ let
           "demarches" # Démarches Normaliennes
           "docs" # Outline
           "docuseal" # Docuseal
+          "gist" # Opengist
           "grafana" # Grafana
           "netbox-v2" # Netbox
           "nms" # LibreNMS

meta/nodes/nixos.nix

@@ -121,7 +121,10 @@
       hashedPassword = "$y$j9T$2nxZHq84G7fWvWMEaGavE/$0ADnmD9qMpXJJ.rWWH9086EakvZ3wAg0mSxZYugOf3C";
 
       stateVersion = "23.05";
-      nix-modules = [ "services/stirling-pdf" ];
+      nix-modules = [
+        "services/opengist"
+        "services/stirling-pdf"
+      ];
 
       nixpkgs = {
         version = "24.11";

npins/sources.json

@@ -244,9 +244,9 @@
       },
       "branch": "dgnum",
       "submodules": false,
-      "revision": "6320f8c654caff8552e62d250d2bf99a10b33618",
+      "revision": "0cdf222c07b9cbd49857ae046fb41ae9f651cc3f",
       "url": null,
-      "hash": "0ljwnv5p7688fnvqrccp9yrzy400ifn5i7a3bzkcg1yjfa324rjj"
+      "hash": "0016h05aibwzzwnq24hghxmwnnikk3n3jjddcwhm1dxyghk68yal"
     },
     "nix-pkgs": {
       "type": "Git",