1 files changed, 25 insertions, 32 deletions

diff --git a/hosts/tower/web/git.nix b/hosts/tower/web/git.nix
index e46eb90..fd913aa 100644
--- a/hosts/tower/web/git.nix
+++ b/hosts/tower/web/git.nix
@@ -1,7 +1,6 @@
-{ pkgs, config, ... }:
+{ pkgs, ... }:
 let
-  # secrets = config.sops.secrets;
-  # domainInternal = "git.sorre.internal";
+  domainInternal = "git.sorre.internal";
   domainPublic = "git.sorre.xyz";
 
   commonSettings = {
@@ -9,41 +8,35 @@ let
   };
 in
 {
+  # cgit-public is proxied via enode
   networking.firewall.allowedTCPPorts = [ 8721 ];
+
   services.nginx = {
     enable = true;
-    # virtualHosts."${domainInternal}" = {
-    #   forceSSL = true;
-    #   # sslCertificateKey = secrets."wg-ca-key".path;
-    #   # sslCertificate = secrets."wg-ca-crt".path;
-    #   listen = [
-    #     {
-    #       addr = "100.64.0.3";
-    #       port = 443;
-    #       # ssl = true;
-    #     }
-    #   ];
-    # };
+    virtualHosts."${domainInternal}".listen = [
+      {
+        addr = "127.0.0.1";
+        port = 1923;
+      }
+    ];
 
-    virtualHosts."${domainPublic}" = {
-      listen = [
-        {
-          addr = "100.64.0.6";
-          port = 8721;
-        }
-      ];
-    };
+    virtualHosts."${domainPublic}".listen = [
+      {
+        addr = "100.64.0.6";
+        port = 8721;
+      }
+    ];
   };
 
-  # services.cgit.internal = {
-  #   enable = true;
-  #   user = "cgit-internal";
-  #   group = "cgit";
-  #   nginx.virtualHost = domainInternal;
-  #   gitHttpBackend.checkExportOkFiles = false;
-  #   scanPath = "/var/lib/git/repos/isabella";
-  #   settings = commonSettings;
-  # };
+  services.cgit.internal = {
+    enable = true;
+    user = "cgit-internal";
+    group = "cgit";
+    nginx.virtualHost = domainInternal;
+    gitHttpBackend.checkExportOkFiles = false;
+    scanPath = "/var/lib/git/repos/isabella";
+    settings = commonSettings;
+  };
 
   services.cgit.public = {
     enable = true;