ktiu/omniflake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

forgejo cert todo

Browse source
This commit is contained in:
Till 2025-12-15 17:53:02 +01:00
parent d3cb19d6f1
commit 842e05de0d
4 changed files with 23 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

22
system/web-server/forgejo.nix
View file

@ -10,18 +10,16 @@ in
{
security.acme.certs."${config.networking.domain}".extraDomainNames = [
"outline.${config.networking.domain}"
"git.ktiu.net"
];
services.nginx = {
virtualHosts.${cfg.settings.server.DOMAIN} = {
forceSSL = true;
useACMEHost = config.networking.domain;
locations."/".proxyPass = "http://localhost:${toString srv.HTTP_PORT}";
extraConfig = ''
client_max_body_size 512M;
'';
};
services.nginx.virtualHosts."${srv.DOMAIN}" = {
forceSSL = true;
useACMEHost = config.networking.domain;
locations."/".proxyPass = "http://localhost:${toString srv.HTTP_PORT}";
extraConfig = ''
client_max_body_size 512M;
'';
};
services.forgejo = {
@ -37,11 +35,11 @@ in
DOMAIN = "git.${config.networking.domain}";
# You need to specify this to remove the port from URLs in the web UI.
ROOT_URL = "https://${srv.DOMAIN}/";
HTTP_PORT = 3000;
HTTP_PORT = 3080;
};
# You can temporarily allow registration to create an admin user.
# service.DISABLE_REGISTRATION = true;
service.DISABLE_REGISTRATION = true;
# Add support for actions, based on act: https://github.com/nektos/act
actions = {