From 24a649a96b6e0f42399852ea203f1175397bc944 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Sun, 16 Aug 2026 11:51:04 +0200
Subject: create public cgit instance

---
 hosts/sagittarius/web/git.nix | 23 ++++++++++++++++++++---
 1 file changed, 20 insertions(+), 3 deletions(-)

(limited to 'hosts/sagittarius/web')

diff --git a/hosts/sagittarius/web/git.nix b/hosts/sagittarius/web/git.nix
index 3e777e5..d321ebb 100644
--- a/hosts/sagittarius/web/git.nix
+++ b/hosts/sagittarius/web/git.nix
@@ -1,12 +1,13 @@
 { config, ... }:
 let
   secrets = config.sops.secrets;
-  domain = "git.sorre.internal";
+  domain-internal = "git.sorre.internal";
+  domain-public = "git.sorre.xyz";
 in
 {
   services.nginx = {
     enable = true;
-    virtualHosts."${domain}" = {
+    virtualHosts."${domain-internal}" = {
       forceSSL = true;
       sslCertificateKey = secrets."wg-ca-key".path;
       sslCertificate = secrets."wg-ca-crt".path;
@@ -18,14 +19,30 @@ in
         }
       ];
     };
+
+    virtualHosts."${domain-public}" = {
+      enableACME = true;
+      forceSSL = true;
+    };
   };
 
   services.cgit.internal = {
     enable = true;
     user = "cgit-internal";
     group = "cgit";
-    nginx.virtualHost = domain;
+    nginx.virtualHost = domain-internal;
     gitHttpBackend.checkExportOkFiles = false;
     scanPath = "/var/lib/git/repos/isabella";
   };
+
+  services.cgit.public = {
+    enable = true;
+    user = "cgit-public";
+    group = "cgit";
+    nginx.virtualHost = domain-public;
+    gitHttpBackend.checkExportOkFiles = false;
+    repos = {
+      futils.path = "/var/lib/git/repos/isabella/futils";
+    };
+  };
 }
-- 
cgit v1.3.1