{ config, pkgs, lib, ... }:
with lib; {
  config = let cfg = config.elss.server.gitea;
  in mkIf cfg.enable {
    services.nginx.virtualHosts."git.ellmauthaler.net" = {
      enableACME = true;
      forceSSL = true;
      locations."/" = { proxyPass = "http://localhost:3001"; };
    };

    services.gitea = {
      enable = true;
      settings.service = { DISABLE_REGISTRATION = true; };
      appName = "gitea: ellmauthaler.net gitea service";
      database = {
        type = "postgres";
        host = "/run/posgresql";
      };
      settings = {
        repository = { DEFAULT_BRANCH = "main"; };
        server = {
          ROOT_URL = "https://git.ellmauthaler.net";
          HTTP_PORT = 3001;
          DOMAIN = "git.ellmauthaler.net";
        };
      };
    };
  };
}