Add gitea functionality (#6)

* Add gitea functionality with default activation for the server module

modules/server/default.nix

@@ -14,10 +14,12 @@ with lib; {
     smailserver.enable = mkEnableOption "Set up simple mail server";
     unbound.enable = mkEnableOption "Set unbound dns up";
     grocy.enable = mkEnableOption "Set up grocy";
+    gitea.enable = mkEnableOption "Set up gitea";
   };
 
   imports = [
     ./acme.nix
+    ./gitea.nix
     ./grocy.nix
     ./nextcloud.nix
     ./nginx.nix
@@ -37,6 +39,7 @@ with lib; {
         nextcloud.enable = mkDefault true;
         unbound.enable = mkDefault true;
         grocy.enable = mkDefault true;
+        gitea.enable = mkDefault true;
       };
     };
 }

modules/server/gitea.nix

@@ -0,0 +1,29 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+with lib; {
+  config = let
+    cfg = config.elss.server.gitea;
+  in
+    mkIf cfg.enable {
+      services.nginx.virtualHosts."git.ellmauthaler.net" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxyPass = "http://localhost:3001";
+        };
+      };
+
+      services.gitea = {
+        enable = true;
+        appName = "gitea: ellmauthaler.net gitea service";
+        database = {
+          type = "postgres";
+          host = "/run/posgresql";
+        };
+      };
+    };
+}

modules/server/sql.nix

@@ -19,6 +19,12 @@ with lib; {
             ensurePermissions."DATABASE nextcloud" = "ALL PRIVILEGES";
           }
         ];
+        authentication = ''
+          local gitea all ident map=gitea-users
+        '';
+        identMap = ''
+          gitea-users gitea gitea
+        '';
       };
     };
 }