nixos-configs/devices/servivi/modules/arion/forgejo/compose.nix

73 lines
1.5 KiB
Nix
Raw Normal View History

2024-01-07 04:37:11 -05:00
{
config,
rwPath,
importImage,
2024-01-07 04:37:11 -05:00
...
}: let
secrets = config.sops.secrets;
in {
services = {
"forgejo" = {
container_name = "forgejo";
hostImage = importImage ./images/forgejo.nix;
2024-01-07 04:37:11 -05:00
ports = [
# Redirect WAN port 22 to this port
"2222:22"
"3000:3000"
];
restart = "always";
depends_on = ["forgejo-db"];
env_file = [secrets.forgejo.path];
environment = {
APP_NAME = "Gitea";
# TODO: change ids
USER_UID = "1000";
USER_GID = "1000";
ROOT_URL = "https://git.nelim.org";
SSH_DOMAIN = "git.nelim.org";
SSH_PORT = 22;
HTTP_PORT = 3000;
};
volumes = [
"${rwPath}/data:/data"
"/etc/timezone:/etc/timezone:ro"
"/etc/localtime:/etc/localtime:ro"
];
};
"forgejo-db" = {
container_name = "forgejo-db";
hostImage = importImage ./images/postgres.nix;
2024-01-07 04:37:11 -05:00
restart = "always";
env_file = [secrets.forgejo-db.path];
volumes = ["${rwPath}/db:/var/lib/postgresql/data"];
2024-01-07 04:37:11 -05:00
};
"runner" = {
container_name = "act_runner";
hostImage = importImage ./images/act_runner.nix;
privileged = true;
2024-01-07 04:37:11 -05:00
restart = "always";
depends_on = ["forgejo"];
2024-01-07 04:37:11 -05:00
env_file = [secrets.forgejo-runner.path];
environment = {
GITEA_INSTANCE_URL = "https://git.nelim.org";
GITEA_RUNNER_NAME = "DinD";
};
2024-01-07 04:37:11 -05:00
volumes = ["${rwPath}/act:/data"];
2024-01-07 04:37:11 -05:00
};
};
}