dotfiles/modules/nixos/services/gitea.nix

119 lines
3.3 KiB
Nix
Raw Normal View History

2023-07-05 00:01:11 +00:00
{ config, pkgs, lib, ... }:
2022-10-16 20:34:28 +00:00
let giteaPath = "/var/lib/gitea"; # Default service directory
in {
options = {
gitServer = lib.mkOption {
description = "Hostname for git server (Gitea).";
2023-01-21 14:29:03 +00:00
type = lib.types.nullOr lib.types.str;
2022-12-21 21:18:03 +00:00
default = null;
2022-10-16 20:34:28 +00:00
};
};
config = lib.mkIf config.services.gitea.enable {
2022-10-16 20:34:28 +00:00
services.gitea = {
database.type = "sqlite3";
settings = {
repository = {
DEFAULT_PUSH_CREATE_PRIVATE = true;
DISABLE_HTTP_GIT = false;
ACCESS_CONTROL_ALLOW_ORIGIN = config.gitServer;
2022-10-16 20:34:28 +00:00
ENABLE_PUSH_CREATE_USER = true;
ENABLE_PUSH_CREATE_ORG = true;
DEFAULT_BRANCH = "main";
};
server = {
2023-04-30 21:51:35 +00:00
HTTP_PORT = 3001;
HTTP_ADDRESS = "127.0.0.1";
ROOT_URL = "https://${config.gitServer}/";
2022-10-16 20:34:28 +00:00
SSH_PORT = 22;
START_SSH_SERVER = false; # Use sshd instead
DISABLE_SSH = false;
# SSH_LISTEN_HOST = "0.0.0.0";
# SSH_LISTEN_PORT = 122;
};
service.DISABLE_REGISTRATION = true;
session.COOKIE_SECURE = true;
ui.SHOW_USER_EMAIL = false;
};
extraConfig = null;
};
networking.firewall.allowedTCPPorts = [ 122 ];
2023-07-05 00:01:11 +00:00
users.users.${config.user}.extraGroups = [ "gitea" ];
2022-10-16 20:34:28 +00:00
2022-12-21 21:18:03 +00:00
caddy.routes = [{
match = [{ host = [ config.gitServer ]; }];
2022-10-16 20:34:28 +00:00
handle = [{
handler = "reverse_proxy";
upstreams = [{ dial = "localhost:3001"; }];
}];
}];
## Backup config
# Open to groups, allowing for backups
systemd.services.gitea.serviceConfig.StateDirectoryMode =
lib.mkForce "0770";
2023-04-30 21:51:35 +00:00
systemd.tmpfiles.rules =
[ "f ${giteaPath}/data/gitea.db 0660 gitea gitea" ];
2022-10-16 20:34:28 +00:00
# Allow litestream and gitea to share a sqlite database
users.users.litestream.extraGroups = [ "gitea" ];
users.users.gitea.extraGroups = [ "litestream" ];
# Backup sqlite database with litestream
services.litestream = {
settings = {
dbs = [{
path = "${giteaPath}/data/gitea.db";
replicas = [{
url =
2022-12-22 00:31:25 +00:00
"s3://${config.backup.s3.bucket}.${config.backup.s3.endpoint}/gitea";
2022-10-16 20:34:28 +00:00
}];
}];
};
};
# Don't start litestream unless gitea is up
systemd.services.litestream = {
after = [ "gitea.service" ];
requires = [ "gitea.service" ];
};
2023-07-05 00:01:11 +00:00
# Run a repository file backup on a schedule
systemd.timers.gitea-backup = lib.mkIf (config.backup.s3.endpoint != null) {
timerConfig = {
OnCalendar = "*-*-* 00:00:00"; # Once per day
Unit = "gitea-backup.service";
};
wantedBy = [ "timers.target" ];
};
# Backup Gitea repos to object storage
systemd.services.gitea-backup =
lib.mkIf (config.backup.s3.endpoint != null) {
description = "Backup Gitea data";
environment.AWS_ACCESS_KEY_ID = config.backup.s3.accessKeyId;
serviceConfig = {
Type = "oneshot";
User = "gitea";
Group = "backup";
EnvironmentFile = config.secrets.backup.dest;
};
script = ''
${pkgs.awscli2}/bin/aws s3 sync --exclude */gitea.db* \
${giteaPath}/ \
s3://${config.backup.s3.bucket}/gitea-data/ \
--endpoint-url=https://${config.backup.s3.endpoint}
'';
};
2022-10-16 20:34:28 +00:00
};
}