init forgejo

devices/ellaca/options.nix

@@ -5,6 +5,7 @@
     website.enable = true;
     fedi.enable = false; # Currently broken
     matrix.enable = true;
+    git.enable = true;
 
     stateVersion = "25.05";
     hmStateVersion = "25.05";

modules/default.nix

@@ -7,6 +7,7 @@ in {
     ./fedi
     ./fonts
     ./games
+    ./git
     ./home
     ./layout
     ./matrix

modules/git/default.nix

@@ -0,0 +1,36 @@
+{ lib, config, ... }: let
+  inherit (lib) mkIf;
+  inherit (config) conf;
+  cfg = config.services.forgejo.settings.server;
+in mkIf conf.git.enable {
+  services = {
+    nginx = {
+      virtualHosts.${cfg.DOMAIN} = {
+        forceSSL = true;
+        useACMEHost = "twoneis.site";
+        extraConfig = ''
+          client_max_body_size 512M;
+        '';
+        locations."/".proxyPass = "http://localhost:${toString cfg.HTTP_PORT}";
+      };
+    };
+
+    forgejo = {
+      enable = true;
+      database.type = "postgres";
+      lfs.enable = true;
+      settings = {
+        server = {
+          DOMAIN = "git.twoneis.site";
+          ROOT_URL = "https://${cfg.DOMAIN}";
+          HTTP_PORT = 3000;
+        };
+        service.DISABLE_REGISTRATION = true;
+        actions = {
+          ENABLED = true;
+          DEFAULT_ACTIONS_URL = "github";
+        };
+      };
+    };
+  };
+}

options.nix

@@ -21,6 +21,7 @@ in {
       website.enable = mkEnableOption "Serve website through nginx. Nginx must be enabled to work correctly.";
       fedi.enable = mkEnableOption "Host a fedi server on this machine.";
       matrix.enable = mkEnableOption "Host a matrix server on this machine";
+      git.enable = mkEnableOption "Host a git server on this machine";
 
       # Mixed and more complex options
       username = mkOption {