aboutsummaryrefslogtreecommitdiff
path: root/hosts
diff options
context:
space:
mode:
authorIsabella Bastaja <isabella@sorre.xyz>2026-08-16 11:51:04 +0200
committerIsabella Bastaja <isabella@sorre.xyz>2026-08-16 12:01:11 +0200
commit24a649a96b6e0f42399852ea203f1175397bc944 (patch)
tree0661ecd208122e407ba6eaa483ec6c0e49e84116 /hosts
parente2e727806ef50f8686284158b66e52d08d93cf8b (diff)
create public cgit instancev0.1.0
Diffstat (limited to 'hosts')
-rw-r--r--hosts/sagittarius/web/git.nix23
1 files changed, 20 insertions, 3 deletions
diff --git a/hosts/sagittarius/web/git.nix b/hosts/sagittarius/web/git.nix
index 3e777e5..d321ebb 100644
--- a/hosts/sagittarius/web/git.nix
+++ b/hosts/sagittarius/web/git.nix
@@ -1,12 +1,13 @@
{ config, ... }:
let
secrets = config.sops.secrets;
- domain = "git.sorre.internal";
+ domain-internal = "git.sorre.internal";
+ domain-public = "git.sorre.xyz";
in
{
services.nginx = {
enable = true;
- virtualHosts."${domain}" = {
+ virtualHosts."${domain-internal}" = {
forceSSL = true;
sslCertificateKey = secrets."wg-ca-key".path;
sslCertificate = secrets."wg-ca-crt".path;
@@ -18,14 +19,30 @@ in
}
];
};
+
+ virtualHosts."${domain-public}" = {
+ enableACME = true;
+ forceSSL = true;
+ };
};
services.cgit.internal = {
enable = true;
user = "cgit-internal";
group = "cgit";
- nginx.virtualHost = domain;
+ nginx.virtualHost = domain-internal;
gitHttpBackend.checkExportOkFiles = false;
scanPath = "/var/lib/git/repos/isabella";
};
+
+ services.cgit.public = {
+ enable = true;
+ user = "cgit-public";
+ group = "cgit";
+ nginx.virtualHost = domain-public;
+ gitHttpBackend.checkExportOkFiles = false;
+ repos = {
+ futils.path = "/var/lib/git/repos/isabella/futils";
+ };
+ };
}