From dcad4ec4b576726817f5e16021474f09a8982adf Mon Sep 17 00:00:00 2001
From: SindreKjelsrud <sindre@kjelsrud.dev>
Date: Thu, 9 Oct 2025 19:40:29 +0200
Subject: [PATCH] [arabasta] feat: Add forgejo

Signed-off-by: SindreKjelsrud <sindre@kjelsrud.dev>
---
 hosts/arabasta/configuration.nix | 58 ++++++++++++++++++++++++++++++--
 1 file changed, 56 insertions(+), 2 deletions(-)

diff --git a/hosts/arabasta/configuration.nix b/hosts/arabasta/configuration.nix
index 967ebed..4c57a04 100644
--- a/hosts/arabasta/configuration.nix
+++ b/hosts/arabasta/configuration.nix
@@ -78,8 +78,62 @@
     tailscale
   ];
 
-	services.tailscale.enable = true;
-	
+  services = {
+    tailscale.enable = true;
+    forgejo = {
+      enable = true;
+      database.type = "postgres";
+      lfs.enable = true;
+      settings = {
+        server = {
+          APP_NAME = "forgejo";
+          APP_SLOGAN = "Ah well, it's just my programming.";
+          RUN_MODE = "prod";
+          SSH_DOMAIN = "code.kjelsrud.dev";
+          DOMAIN = "code.kjelsrud.dev";
+          HTTP_PORT = 3000;
+          HTTP_ADDR = "0.0.0.0";
+          ROOT_URL = "https://code.kjelsrud.dev";
+          DISABLE_SSH = true;
+          LFS_START_SERVER = true;
+          LFS_JWT_SECRET = "CHANGEME";
+          OFFLINE_MODE = true;
+        };
+        session = {
+          COOKIE_SECURE = true;
+          PROVIDER = "file";
+        };
+        security = {
+          INSTALL_LOCK = true;
+          PASSWORD_HASH_ALGO = "pbkdf2_hi";
+          INTERNAL_TOKEN = "CHANGEME";
+        };
+        service = {
+          DISABLE_REGISTRATION = true;
+          REQUIRE_SIGNIN_VIEW = false;
+          REGISTER_EMAIL_CONFIRM = false;
+          ENABLE_NOTIFY_MAIL = false;
+          ALLOW_ONLY_EXTERNAL_REGISTRATION = false;
+          ENABLE_CAPTCHA = false;
+          DEFAULT_KEEP_EMAIL_PRIVATE = false;
+          DEFAULT_ALLOW_CREATE_ORGANIZATION = false;
+          DEFAULT_ENABLE_TIMETRACKING = true;
+          NO_REPLY_ADDRESS = "noreply.localhost";
+        };
+        mailer.ENABLED = false;
+        openid = {
+          ENABLE_OPENID_SIGNIN = false;
+          ENABLE_OPENID_SIGNUP = false;
+        };
+        actions = {
+          ENABLED = true;
+          DEFAULT_ACTIONS_URL = "https://code.forgejo.org";
+        };
+        oauth2.JWT_SECRET = "CHANGEME";
+      };
+    };
+  };
+
 	fileSystems."/mnt/media" = {
     device = "/dev/disk/by-uuid/956ec2bb-357c-4959-917f-ece881c4615c";
     fsType = "ext4";