root/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

make .onion domains declarative, site updates, add helpers

Browse source
This commit is contained in:
root 2025-11-07 03:09:13 +00:00
parent b3d2a34bc0
commit 450a5ce1d6
25 changed files with 341 additions and 109 deletions
Download patch file Download diff file Expand all files Collapse all files

39
services/forgejo.nix
View file

@ -1,26 +1,29 @@
let
{config, ...}: let
forgejoPort = 8082;
onionUrl = "http://cr27k6asjs7skvjxs6smhqfam3wlvmft2f3iins44k6p6rmmfyolobqd.onion";
in {
services = {
forgejo = {
enable = true;
lfs.enable = false;
settings.server = {
DOMAIN = "git.distrust.network";
HTTP_PORT = forgejoPort;
ROOT_URL = "https://git.distrust.network/";
SSH_PORT = 292;
};
age.secrets."hidden_service/forgejo" = {
file = ../secrets/hidden_service/forgejo;
};
services.forgejo = {
enable = true;
lfs.enable = false;
settings.server = {
DOMAIN = "git.distrust.network";
HTTP_PORT = forgejoPort;
ROOT_URL = "https://git.distrust.network/";
SSH_PORT = builtins.head config.services.openssh.ports;
};
};
caddy.virtualHosts."https://git.distrust.network ${onionUrl}".extraConfig = ''
distrust.services."forgejo" = {
url = "https://git.distrust.network";
onion = {
url = "http://cr27k6asjs7skvjxs6smhqfam3wlvmft2f3iins44k6p6rmmfyolobqd.onion";
secretKey = config.age.secrets."hidden_service/forgejo".path;
};
virtualHostConfig = ''
reverse_proxy localhost:${toString forgejoPort}
header Onion-Location ${onionUrl}
'';
tor.relay.onionServices."forgejo".map = [
80
];
};
}