forgejo init and flake

modules/forgejo.nix

@@ -0,0 +1,27 @@
+{ config, pkgs, ... }:
+
+{
+  services.forgejo = {
+    enable = true;
+    database = {
+      type = "postgres";
+      user = "forgejo";
+      name = "forgejo";
+      socket = "/run/postgresql";
+    };
+    
+    settings = {
+      server = {
+        DOMAIN = "git.death916.xyz";
+        HTTP_PORT = 3050;
+        ROOT_URL = "https://git.death916.xyz/";
+        PROTOCOL = "http";
+      };
+      service = {
+        DISABLE_REGISTRATION = true;
+      };
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ 3050 ];
+}

modules/nixos/orac/services.nix

@@ -59,6 +59,15 @@
     };
   };
 
+  services.postgresql = {
+    enable = true;
+    ensureDatabases = [ "forgejo" ];
+    ensureUsers = [{
+      name = "forgejo";
+      ensureDBOwnership = true;
+    }];
+  };
+
   environment.systemPackages = with pkgs; [
     git
     vim

nixos/orac.nix

@@ -4,6 +4,7 @@
     ../modules/nixos/common/tailscale.nix
     ../modules/soju.nix
     ../modules/containers/docker/pangolin.nix
+    # ../modules/forgejo.nix
     # ../modules/adguard.nix
     ../modules/containers/docker/juicefs.nix
     ../modules/nixos/orac/restic.nix