Change gitea for forgejo

services/default.nix

@@ -1,7 +1,7 @@
 {inputs, ...}: {
   imports = [
     ./nginx
-    ./gitea
+    ./forgejo
     ./redis
     ./jellyfin
     ./nextcloud

services/forgejo/default.nix

@@ -4,30 +4,32 @@
   lib,
   ...
 }: let
-  cfg = config.services.vm_gitea;
+  cfg = config.services.vm_forgejo;
 in {
-  options.services.vm_gitea = {
+  options.services.vm_forgejo = {
     enable = lib.mkEnableOption "Enable minimal config";
     db_ip = lib.mkOption {
       type = lib.types.str;
-      description = "Gitea database IP address";
+      description = "forgejo database IP address";
     };
   };
   config = lib.mkIf cfg.enable {
-    services.gitea = {
+    services.forgejo = {
       enable = true;
       user = "tbarnouin";
       settings = {
         server.HTTP_PORT = 3000;
-        server.ROOT_URL = "http://${config.services.vm.vm_ip}/";
+        server.DISABLE_SSH = true;
+        server.ROOT_URL = "https://git.le43.eu";
         service.DISABLE_REGISTRATION = true;
       };
       database = {
         createDatabase = false;
         type = "postgres";
         host = "${cfg.db_ip}";
+        name = "gitea";
         user = "gitea";
-        passwordFile = "/run/secrets/gitea/gitea-dbpass";
+        passwordFile = "/run/secrets/forgejo/forgejo-dbpass";
       };
     };
     networking.firewall.allowedTCPPorts = [3000];

services/forgejo/secrets/forgejoDBPass.age

@@ -0,0 +1,13 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----