NixOracle: add Forgejo on git.tadix.dev

SQLite backend, registration disabled, proxied via nginx with ACME.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
ltadeu6 2026-05-24 15:30:31 -03:00
parent b37daf3bd1
commit d0a97a1cbe
No known key found for this signature in database
GPG key ID: FB9FDAB6B6F3418D

View file

@ -88,6 +88,19 @@ in {
forceSSL = true; forceSSL = true;
root = "${site}"; root = "${site}";
}; };
virtualHosts."git.tadix.dev" = {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:3000";
proxyWebsockets = true;
extraConfig = ''
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
'';
};
};
virtualHosts."jupyter.tadix.dev" = { virtualHosts."jupyter.tadix.dev" = {
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
@ -104,6 +117,21 @@ in {
}; };
}; };
services.forgejo = {
enable = true;
database.type = "sqlite3";
settings = {
server = {
DOMAIN = "git.tadix.dev";
ROOT_URL = "https://git.tadix.dev";
HTTP_PORT = 3000;
SSH_DOMAIN = "git.tadix.dev";
};
service.DISABLE_REGISTRATION = true;
log.LEVEL = "Warn";
};
};
systemd.services.jupyter-lab = { systemd.services.jupyter-lab = {
description = "Single-user JupyterLab"; description = "Single-user JupyterLab";
after = [ "network.target" ]; after = [ "network.target" ];