{ ... }:
let
  domain = "dev.mc-fucker.cool";
in

{
  services.gitea = {
    enable = true;
    domain = "${domain}";
    rootUrl = "https://${domain}";
    log.level = "Warn";

    database = {
      createDatabase = false;
      host = "192.168.2.5";
      type = "postgres";
      port = 5432;
      name = "giteadb";
      passwordFile = /etc/nixos/keys/gitea-dbpassword;
    };

    settings = {
      service = {
        REGISTER_MANUAL_CONFIRM = true;
      };
      server = {
        START_SSH_SERVER = true;
        SSH_SERVER_HOST_KEYS = "ssh/gitea.ed25519";
      };
      ui = {
        DEFAULT_THEME = "arc-green";
        #THEMES = "gitea-modern";
      };
    };

    ssh.clonePort = 2222;

  };

  networking.firewall.allowedTCPPorts = [ 3000 2222 ];

}
# vim: set et ts=2 sw=2 ai: