Ryan Lahfa
344cc26d8e
Some checks failed
Check meta / check_dns (pull_request) Successful in 18s
Run pre-commit on all files / check (push) Successful in 25s
Check meta / check_meta (pull_request) Successful in 18s
Check workflows / check_workflows (pull_request) Successful in 24s
Build all the nodes / bridge01 (pull_request) Failing after 28s
Build all the nodes / geo01 (pull_request) Failing after 25s
Build all the nodes / compute01 (pull_request) Failing after 31s
Build all the nodes / geo02 (pull_request) Failing after 25s
Build all the nodes / rescue01 (pull_request) Failing after 26s
Build all the nodes / storage01 (pull_request) Failing after 25s
Build all the nodes / vault01 (pull_request) Failing after 26s
Build all the nodes / web02 (pull_request) Failing after 26s
Build all the nodes / web01 (pull_request) Failing after 26s
Build all the nodes / web03 (pull_request) Failing after 28s
Run pre-commit on all files / check (pull_request) Successful in 24s
Our colmena knows how to deal with families of system types, e.g. NixOS systems or Liminix-based systems. This is a step 1 towards supporting our APs in our infrastructure. Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>
108 lines
2.4 KiB
Nix
108 lines
2.4 KiB
Nix
{ config, nixpkgs, ... }:
|
|
|
|
let
|
|
port = 3000;
|
|
host = "git.dgnum.eu";
|
|
in
|
|
{
|
|
services = {
|
|
forgejo = {
|
|
enable = true;
|
|
|
|
user = "git";
|
|
package = nixpkgs.nixos.unstable.forgejo;
|
|
stateDir = "/var/lib/git";
|
|
|
|
database = {
|
|
type = "postgres";
|
|
user = "git";
|
|
name = "git";
|
|
};
|
|
|
|
settings = {
|
|
DEFAULT = {
|
|
APP_NAME = "Forge git de la DGNum";
|
|
};
|
|
|
|
actions = {
|
|
ENABLED = true;
|
|
DEFAULT_ACTIONS_URL = "https://gitea.com";
|
|
};
|
|
|
|
admin = {
|
|
DEFAULT_EMAIL_NOTIFICATIONS = "enabled";
|
|
SEND_NOTIFICATION_EMAIL_ON_NEW_USER = true;
|
|
};
|
|
|
|
log.LEVEL = "Warn";
|
|
|
|
mailer = {
|
|
ENABLED = true;
|
|
FROM = "git@infra.dgnum.eu";
|
|
PROTOCOL = "smtps";
|
|
SMTP_ADDR = "kurisu.lahfa.xyz";
|
|
SMTP_PORT = 465;
|
|
USER = "web-services@infra.dgnum.eu";
|
|
};
|
|
|
|
session = {
|
|
SESSION_LIFE_TIME = 24 * 3600 * 7;
|
|
GC_INTERVAL_TIME = 24 * 3600 * 7;
|
|
};
|
|
|
|
server = {
|
|
ROOT_URL = "https://${host}/";
|
|
DOMAIN = host;
|
|
HTTP_ADDRESS = "127.0.0.1";
|
|
HTTP_PORT = port;
|
|
APP_DATA_PATH = "/var/lib/git/data";
|
|
OFFLINE_MODE = false;
|
|
};
|
|
|
|
service = {
|
|
EMAIL_DOMAIN_ALLOWLIST = "dgnum.eu,*";
|
|
EMAIL_DOMAIN_BLOCKLIST = "*.shop,*.online,*.store";
|
|
ENABLE_NOTIFY_MAIL = true;
|
|
|
|
DISABLE_REGISTRATION = false;
|
|
REGISTER_EMAIL_CONFIRM = true;
|
|
};
|
|
|
|
ui.THEMES = "forgejo-auto,forgejo-light,forgejo-dark";
|
|
|
|
"cron.cleanup_actions".ENABLED = true;
|
|
"cron.delete_old_actions".ENABLED = true;
|
|
"cron.git_gc_repos".ENABLED = true;
|
|
"cron.update_checker".ENABLED = false;
|
|
};
|
|
|
|
mailerPasswordFile = config.age.secrets."forgejo-mailer_password_file".path;
|
|
};
|
|
};
|
|
|
|
dgn-web.simpleProxies.forgejo = {
|
|
inherit host port;
|
|
};
|
|
|
|
users.users.git = {
|
|
description = "Git Service";
|
|
home = "/var/lib/git";
|
|
useDefaultShell = true;
|
|
group = "git";
|
|
isSystemUser = true;
|
|
};
|
|
|
|
users.groups.git = { };
|
|
|
|
age-secrets.matches."^forgejo-.*$" = {
|
|
owner = "git";
|
|
};
|
|
|
|
dgn-backups.jobs.forgejo.settings.paths = builtins.map (dir: "/var/lib/git/${dir}") [
|
|
"custom"
|
|
"data"
|
|
"repositories"
|
|
".ssh"
|
|
];
|
|
dgn-backups.postgresDatabases = [ "git" ];
|
|
}
|