randogoth/bucur
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added ssh to forgejo

Browse source
This commit is contained in:
randogoth 2026-07-23 12:42:12 +02:00
parent 71f9f585de
commit 8135490639
2 changed files with 25 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

17
modules/services/forgejo.nix
View file

@ -14,7 +14,11 @@ in
ROOT_URL = "https://${domain}/";
HTTP_ADDR = "127.0.0.1";
HTTP_PORT = port;
DISABLE_SSH = true; # HTTPS-only git access
# Git-over-SSH via Forgejo's built-in server on a dedicated port.
START_SSH_SERVER = true;
SSH_PORT = 2222; # advertised in clone URLs
SSH_LISTEN_PORT = 2222; # built-in server listen port
# SSH_DOMAIN defaults to DOMAIN (code.randogoth.com)
};
service = {
DISABLE_REGISTRATION = true; # admin creates accounts
@ -26,6 +30,17 @@ in
};
};
# System-wide SSH client config so root (the nix daemon) can fetch the private
# Forgejo flake inputs, mirroring the Codeberg block in webhook-deploy.nix.
# Reuses the existing /etc/ssh/codeberg_id_ed25519 deploy key (its public half
# is registered on the randogoth Forgejo account).
programs.ssh.extraConfig = ''
Host ${domain}
Port 2222
IdentityFile /etc/ssh/codeberg_id_ed25519
StrictHostKeyChecking accept-new
'';
# Caddy reverse proxy fragment — picked up via the glob import in caddy.nix.
environment.etc."caddy/Caddyfile.d/forgejo.caddyfile".text = ''
${domain} {