Deploy Forgejo trial instance

modules/forgejo.nix

@@ -0,0 +1,66 @@
+{ pkgs, ... }:
+
+{
+  services.forgejo = {
+    enable = true;
+    package = pkgs.forgejo-lts;
+
+    stateDir = "/var/lib/forgejo";
+    repositoryRoot = "/var/lib/forgejo/repositories";
+
+    database = {
+      type = "sqlite3";
+      path = "/var/lib/forgejo/data/forgejo.db";
+    };
+
+    lfs.enable = false;
+
+    settings = {
+      server = {
+        PROTOCOL = "http";
+        HTTP_ADDR = "127.0.0.1";
+        HTTP_PORT = 3001;
+
+        DOMAIN = "git.tobiasostner.de";
+        ROOT_URL = "https://git.tobiasostner.de/";
+
+        SSH_DOMAIN = "git.tobiasostner.de";
+        SSH_PORT = 22;
+        SSH_USER = "forgejo";
+        START_SSH_SERVER = false;
+      };
+
+      service.DISABLE_REGISTRATION = true;
+      session.COOKIE_SECURE = true;
+
+      actions.ENABLED = false;
+      packages.ENABLED = false;
+      mailer.ENABLED = false;
+    };
+  };
+
+  services.nginx.virtualHosts."git.tobiasostner.de" = {
+    enableACME = true;
+    forceSSL = true;
+    extraConfig = ''
+      merge_slashes off;
+    '';
+
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:3001";
+      extraConfig = ''
+        client_max_body_size 512M;
+
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Connection $http_connection;
+        proxy_set_header Upgrade $http_upgrade;
+      '';
+    };
+  };
+
+  environment.systemPackages = [ pkgs.forgejo-lts ];
+}