From 0318e2e56f8290ed6edd631683e07f49e6377baf Mon Sep 17 00:00:00 2001
From: death916 <mail@trentnelson.dev>
Date: Tue, 10 Feb 2026 04:54:51 -0800
Subject: [PATCH] forgejo init and flake

---
 modules/forgejo.nix             | 27 +++++++++++++++++++++++++++
 modules/nixos/orac/services.nix |  9 +++++++++
 nixos/orac.nix                  |  1 +
 3 files changed, 37 insertions(+)
 create mode 100644 modules/forgejo.nix

diff --git a/modules/forgejo.nix b/modules/forgejo.nix
new file mode 100644
index 0000000..af4c89f
--- /dev/null
+++ b/modules/forgejo.nix
@@ -0,0 +1,27 @@
+{ config, pkgs, ... }:
+
+{
+  services.forgejo = {
+    enable = true;
+    database = {
+      type = "postgres";
+      user = "forgejo";
+      name = "forgejo";
+      socket = "/run/postgresql";
+    };
+    
+    settings = {
+      server = {
+        DOMAIN = "git.death916.xyz";
+        HTTP_PORT = 3050;
+        ROOT_URL = "https://git.death916.xyz/";
+        PROTOCOL = "http";
+      };
+      service = {
+        DISABLE_REGISTRATION = true;
+      };
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ 3050 ];
+}
\ No newline at end of file
diff --git a/modules/nixos/orac/services.nix b/modules/nixos/orac/services.nix
index 1083a6a..6a70719 100644
--- a/modules/nixos/orac/services.nix
+++ b/modules/nixos/orac/services.nix
@@ -59,6 +59,15 @@
     };
   };
 
+  services.postgresql = {
+    enable = true;
+    ensureDatabases = [ "forgejo" ];
+    ensureUsers = [{
+      name = "forgejo";
+      ensureDBOwnership = true;
+    }];
+  };
+
   environment.systemPackages = with pkgs; [
     git
     vim
diff --git a/nixos/orac.nix b/nixos/orac.nix
index 4b69798..6c5efab 100644
--- a/nixos/orac.nix
+++ b/nixos/orac.nix
@@ -4,6 +4,7 @@
     ../modules/nixos/common/tailscale.nix
     ../modules/soju.nix
     ../modules/containers/docker/pangolin.nix
+    # ../modules/forgejo.nix
     # ../modules/adguard.nix
     ../modules/containers/docker/juicefs.nix
     ../modules/nixos/orac/restic.nix