initial commit

systems/common/services/forgejo.nix

@@ -0,0 +1,31 @@
+{
+  lib,
+  pkgs,
+  ...
+}:
+{
+  services.forgejo = {
+    enable = true;
+  };
+
+  services.caddy = {
+    enable = true;
+
+    virtualHosts = {
+      "forgejo.sysrq.ca" = {
+        extraConfig = ''
+          encode gzip
+
+          # Automatically handle HTTPS via Let’s Encrypt
+          # Caddy will request and renew certs for immich.sysrq.ca
+
+          reverse_proxy http://192.168.0.60:3000 {
+          }
+        '';
+      };
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ 3000 ];
+
+}