forgejo!

devices/server/configuration.nix

@@ -44,6 +44,10 @@ in {
       reverse_proxy http://127.0.0.1:3000
     '';
 
+    virtualHosts."git.polensky.me".extraConfig = ''
+      reverse_proxy http://127.0.0.1:3001
+    '';
+
     virtualHosts."pb.polensky.me".extraConfig = ''
       request_body {
         max_size 10MB
@@ -71,6 +75,24 @@ in {
     openFirewall = true; # 8080
   };
 
+  services.forgejo = {
+    enable = true;
+    lfs.enable = true;
+    settings = {
+      server = {
+        DOMAIN = "git.polensky.me";
+        ROOT_URL = "https://git.polensky.me/";
+        HTTP_PORT = 3001;
+      };
+      service = {
+        DISABLE_REGISTRATION = true;
+      };
+      actions = {
+        ENABLED = true;
+      };
+    };
+  };
+
   # observability
   services = {
     grafana = {