uku/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(forgejo): enable ssh server

Browse source
This commit is contained in:
uku 2024-05-19 11:22:42 +02:00
parent 9a254038ba
commit c1d8953fc0
Signed by: uku
SSH key fingerprint: SHA256:4P0aN6M8ajKukNi6aPOaX0LacanGYtlfjmN+m/sHY/o
1 changed files with 45 additions and 30 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

75
systems/etna/forgejo.nix
View file

@ -1,44 +1,59 @@
_: {
cfTunnels."git.uku3lig.net" = "http://localhost:3000";
services.forgejo = {
enable = true;
services = {
forgejo = {
enable = true;
database = {
type = "postgres";
createDatabase = true;
};
settings = {
DEFAULT.APP_NAME = "uku's forge";
server = {
DISABLE_SSH = true;
ROOT_URL = "https://git.uku3lig.net";
database = {
type = "postgres";
createDatabase = true;
};
service = {
ALLOW_ONLY_EXTERNAL_REGISTRATION = true;
# TODO enable turnstile once it gets fixed
# see codeberg:forgejo/forgejo#3832
ENABLE_CAPTCHA = true;
};
settings = {
DEFAULT.APP_NAME = "uku's forge";
oauth2 = {
# providers are configured in the admin panel
ENABLED = true;
};
server = {
ROOT_URL = "https://git.uku3lig.net";
START_SSH_SERVER = true;
BUILTIN_SSH_SERVER_USER = "git";
SSH_DOMAIN = "ssh.uku.moe";
SSH_LISTEN_PORT = 2222;
};
actions.ENABLED = false;
service = {
ALLOW_ONLY_EXTERNAL_REGISTRATION = true;
# TODO enable turnstile once it gets fixed
# see codeberg:forgejo/forgejo#3832
ENABLE_CAPTCHA = true;
};
"ui.meta" = {
AUTHOR = "uku's forge";
DESCRIPTION = "the place where literally nothing gets done";
};
oauth2 = {
# providers are configured in the admin panel
ENABLED = true;
};
"repository.signing" = {
DEFAULT_TRUST_MODEL = "committer";
actions.ENABLED = false;
"ui.meta" = {
AUTHOR = "uku's forge";
DESCRIPTION = "the place where literally nothing gets done";
};
"repository.signing" = {
DEFAULT_TRUST_MODEL = "committer";
};
};
};
frp.settings.proxies = [
{
name = "forgejo-ssh";
type = "tcp";
localIp = "127.0.0.1";
localPort = 2222;
remotePort = 22;
}
];
};
}