{
  config,
  pkgs,
  lib,
  ...
}:
with lib; {
  config = let
    cfg = config.elss.server.gitea;
  in
    mkIf cfg.enable {
      services.nginx.virtualHosts."git.ellmauthaler.net" = {
        enableACME = true;
        forceSSL = true;
        locations."/" = {proxyPass = "http://localhost:3001";};
      };

      services.gitea = {
        enable = true;
        settings.service = {DISABLE_REGISTRATION = true;};
        appName = "gitea: ellmauthaler.net gitea service";
        database = {
          type = "postgres";
          host = "/run/posgresql";
        };
        settings = {
          repository = {DEFAULT_BRANCH = "main";};
          server = {
            ROOT_URL = "https://git.ellmauthaler.net";
            HTTP_PORT = 3001;
            DOMAIN = "git.ellmauthaler.net";
          };
        };
      };
    };
}