let
  forgejoPort = 8082;
  onionUrl = "http://cr27k6asjs7skvjxs6smhqfam3wlvmft2f3iins44k6p6rmmfyolobqd.onion";
in {
  services.forgejo = {
    enable = true;
    lfs.enable = false;
    settings.server = {
      DOMAIN = "git.distrust.network";
      HTTP_PORT = forgejoPort;
      ROOT_URL = "https://git.distrust.network/";
      SSH_PORT = 292;
    };
  };

  services.caddy.virtualHosts."https://git.distrust.network ${onionUrl}".extraConfig = ''
    reverse_proxy localhost:${toString forgejoPort}
  '';

  services.tor.relay.onionServices."forgejo".map = [
    80
  ];
}