aboutsummaryrefslogtreecommitdiff
path: root/hosts/sagittarius/web/git.nix
diff options
context:
space:
mode:
authorIsabella Bastaja <isabella@sorre.xyz>2026-08-20 21:47:51 +0200
committerIsabella Bastaja <isabella@sorre.xyz>2026-08-20 21:56:37 +0200
commitb57bf02455c97a70efb22c6c7805f4df87c8b998 (patch)
tree82627b0f30df38a5f158dd3abe8cc272ee12e932 /hosts/sagittarius/web/git.nix
parent5e22d39395cfb7db3734c8ac5c00cc7f277f86cc (diff)
sagittarius: re-enable git...
Diffstat (limited to 'hosts/sagittarius/web/git.nix')
-rw-r--r--hosts/sagittarius/web/git.nix52
1 files changed, 28 insertions, 24 deletions
diff --git a/hosts/sagittarius/web/git.nix b/hosts/sagittarius/web/git.nix
index 205d661..8e7b772 100644
--- a/hosts/sagittarius/web/git.nix
+++ b/hosts/sagittarius/web/git.nix
@@ -1,6 +1,6 @@
{ config, ... }:
let
- secrets = config.sops.secrets;
+ # secrets = config.sops.secrets;
domainInternal = "git.sorre.internal";
domainPublic = "git.sorre.xyz";
@@ -9,20 +9,22 @@ let
};
in
{
+ imports = [ ./acme.nix ];
+
services.nginx = {
- enable = false;
- virtualHosts."${domainInternal}" = {
- forceSSL = true;
- sslCertificateKey = secrets."wg-ca-key".path;
- sslCertificate = secrets."wg-ca-crt".path;
- listen = [
- {
- addr = "100.64.0.3";
- port = 443;
- ssl = true;
- }
- ];
- };
+ enable = true;
+ # virtualHosts."${domainInternal}" = {
+ # forceSSL = true;
+ # sslCertificateKey = secrets."wg-ca-key".path;
+ # sslCertificate = secrets."wg-ca-crt".path;
+ # listen = [
+ # {
+ # addr = "100.64.0.3";
+ # port = 443;
+ # ssl = true;
+ # }
+ # ];
+ # };
virtualHosts."${domainPublic}" = {
enableACME = true;
@@ -30,24 +32,26 @@ in
};
};
- services.cgit.internal = {
- enable = false;
- user = "cgit-internal";
- group = "cgit";
- nginx.virtualHost = domainInternal;
- gitHttpBackend.checkExportOkFiles = false;
- scanPath = "/var/lib/git/repos/isabella";
- settings = commonSettings;
- };
+ # services.cgit.internal = {
+ # enable = false;
+ # user = "cgit-internal";
+ # group = "cgit";
+ # nginx.virtualHost = domainInternal;
+ # gitHttpBackend.checkExportOkFiles = false;
+ # scanPath = "/var/lib/git/repos/isabella";
+ # settings = commonSettings;
+ # };
services.cgit.public = {
- enable = false;
+ enable = true;
user = "cgit-public";
group = "cgit";
nginx.virtualHost = domainPublic;
gitHttpBackend.checkExportOkFiles = false;
repos = {
futils.path = "/var/lib/git/repos/isabella/futils";
+ sorre-website.path = "/var/lib/git/repos/isabella/sorre-website";
+ xpkgs.path = "/var/lib/git/repos/isabella/xpkgs";
nixos-config.path = "/var/lib/git/repos/isabella/nixos-config";
};
settings = commonSettings;