diff options
| author | Isabella Bastaja <isabella@sorre.xyz> | 2026-08-20 21:47:51 +0200 |
|---|---|---|
| committer | Isabella Bastaja <isabella@sorre.xyz> | 2026-08-20 21:56:37 +0200 |
| commit | b57bf02455c97a70efb22c6c7805f4df87c8b998 (patch) | |
| tree | 82627b0f30df38a5f158dd3abe8cc272ee12e932 /hosts/sagittarius/web/git.nix | |
| parent | 5e22d39395cfb7db3734c8ac5c00cc7f277f86cc (diff) | |
sagittarius: re-enable git...
Diffstat (limited to 'hosts/sagittarius/web/git.nix')
| -rw-r--r-- | hosts/sagittarius/web/git.nix | 52 |
1 files changed, 28 insertions, 24 deletions
diff --git a/hosts/sagittarius/web/git.nix b/hosts/sagittarius/web/git.nix index 205d661..8e7b772 100644 --- a/hosts/sagittarius/web/git.nix +++ b/hosts/sagittarius/web/git.nix @@ -1,6 +1,6 @@ { config, ... }: let - secrets = config.sops.secrets; + # secrets = config.sops.secrets; domainInternal = "git.sorre.internal"; domainPublic = "git.sorre.xyz"; @@ -9,20 +9,22 @@ let }; in { + imports = [ ./acme.nix ]; + services.nginx = { - enable = false; - virtualHosts."${domainInternal}" = { - forceSSL = true; - sslCertificateKey = secrets."wg-ca-key".path; - sslCertificate = secrets."wg-ca-crt".path; - listen = [ - { - addr = "100.64.0.3"; - port = 443; - ssl = true; - } - ]; - }; + enable = true; + # virtualHosts."${domainInternal}" = { + # forceSSL = true; + # sslCertificateKey = secrets."wg-ca-key".path; + # sslCertificate = secrets."wg-ca-crt".path; + # listen = [ + # { + # addr = "100.64.0.3"; + # port = 443; + # ssl = true; + # } + # ]; + # }; virtualHosts."${domainPublic}" = { enableACME = true; @@ -30,24 +32,26 @@ in }; }; - services.cgit.internal = { - enable = false; - user = "cgit-internal"; - group = "cgit"; - nginx.virtualHost = domainInternal; - gitHttpBackend.checkExportOkFiles = false; - scanPath = "/var/lib/git/repos/isabella"; - settings = commonSettings; - }; + # services.cgit.internal = { + # enable = false; + # user = "cgit-internal"; + # group = "cgit"; + # nginx.virtualHost = domainInternal; + # gitHttpBackend.checkExportOkFiles = false; + # scanPath = "/var/lib/git/repos/isabella"; + # settings = commonSettings; + # }; services.cgit.public = { - enable = false; + enable = true; user = "cgit-public"; group = "cgit"; nginx.virtualHost = domainPublic; gitHttpBackend.checkExportOkFiles = false; repos = { futils.path = "/var/lib/git/repos/isabella/futils"; + sorre-website.path = "/var/lib/git/repos/isabella/sorre-website"; + xpkgs.path = "/var/lib/git/repos/isabella/xpkgs"; nixos-config.path = "/var/lib/git/repos/isabella/nixos-config"; }; settings = commonSettings; |
