rice/hosts/ami/forgejo.nix

65 lines
1.6 KiB
Nix

{pkgs, ...}: let
port = 3000;
in {
services = {
forgejo = {
enable = true;
package = pkgs.unstable.forgejo;
settings = {
DEFAULT = {
APP_NAME = "buffet's kitchen";
};
server = {
DOMAIN = "buffets.kitchen";
ROOT_URL = "https://buffets.kitchen/";
HTTP_PORT = port;
};
"markup.asciidoc" = {
ENABLED = true;
NEED_POSTPROCESS = true;
FILE_EXTENSIONS = ".adoc,.asciidoc";
RENDER_COMMAND = ''"${pkgs.asciidoctor}/bin/asciidoctor -e --safe-mode=secure -a showtitle --out-file=- -"'';
IS_INPUT_FILE = false;
};
"markup.restructuredtext" = {
ENABLED = true;
NEED_POSTPROCESS = true;
FILE_EXTENSIONS = ".rst";
RENDER_COMMAND = ''"timeout 30s ${pkgs.pandoc}/bin/pandoc +RTS -M512M -RTS -f rst"'';
IS_INPUT_FILE = false;
};
service.REGISTER_MANUAL_CONFIRM = true;
cron.ENABLED = true;
federation.ENABLED = true;
};
};
nginx = {
enable = true;
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."buffets.kitchen" = {
useACMEHost = "buffet.sh";
forceSSL = true;
locations."= /" = {
extraConfig = ''
return 301 https://$host/chef;
'';
};
locations."/" = {
proxyPass = "http://localhost:${toString port}";
};
};
};
};
}