test(play): forgejo toy

machines/kat-play/configuration.nix

@@ -1,3 +1,4 @@
+{ pkgs, self-meta, ... }:
 {
   deployment = {
     targetHost = "play.kat";
@@ -45,6 +46,85 @@
     openssh.enable = true;
     qemuGuest.enable = true;
     getty.autologinUser = "root";
+
+    forgejo = {
+      enable = true;
+
+      user = "git";
+      package = pkgs.forgejo;
+      stateDir = "/var/lib/git";
+
+      database = {
+        type = "postgres";
+        user = "git";
+        name = "git";
+      };
+
+      settings = {
+        DEFAULT.APP_NAME = "Experimental git-forge";
+
+        actions.ENABLED = false;
+
+        admin = {
+          DEFAULT_EMAIL_NOTIFICATIONS = "disabled";
+          SEND_NOTIFICATION_EMAIL_ON_NEW_USER = false;
+        };
+
+        log.LEVEL = "Warn";
+
+        mailer.ENABLED = false;
+
+        session = {
+          SESSION_LIFE_TIME = 24 * 3600 * 7;
+          GC_INTERVAL_TIME = 24 * 3600 * 7;
+        };
+
+        server = {
+          ROOT_URL = "https://${self-meta.fqdn}/";
+          DOMAIN = self-meta.fqdn;
+          HTTP_ADDRESS = "127.0.0.1";
+          HTTP_PORT = 3000;
+          APP_DATA_PATH = "/var/lib/git/data";
+          OFFLINE_MODE = false;
+        };
+
+        service = {
+          EMAIL_DOMAIN_ALLOWLIST = "dgnum.eu,*";
+          EMAIL_DOMAIN_BLOCKLIST = "*.shop,*.online,*.store";
+          ENABLE_NOTIFY_MAIL = false;
+
+          DISABLE_REGISTRATION = false;
+          REGISTER_EMAIL_CONFIRM = false;
+
+          ENABLE_CAPTCHA = false;
+        };
+
+        ui.THEMES = "forgejo-auto,forgejo-light,forgejo-dark";
+      };
+    };
+    nginx = {
+      enable = true;
+      virtualHosts."play.katvayor.net" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          recommendedProxySettings = true;
+          proxyPass = "http://127.0.0.1:3000/";
+        };
+      };
+    };
+  };
+
+  users = {
+    users.git = {
+      description = "Git Service";
+      home = "/var/lib/git";
+      useDefaultShell = true;
+      group = "git";
+      isSystemUser = true;
+    };
+
+    groups.git = { };
   };
 
   system.stateVersion = "23.11";