reciproka/reciproka-ops
1
0
Fork 0
Code Issues 6 Pull requests Packages Projects Releases Wiki Activity

forgejo: migrate to reciproka.dev

Browse source 
resolves #17
This commit is contained in:
Fiscal Velvet Poet 2023-05-09 23:04:57 +10:00
parent 61b5205569
commit b5fc3737da
Signed by: fiscalvelvetpoet
GPG key ID: D8EBFD58B023BD47
2 changed files with 16 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
nixos/hosts/toscano/configuration.nix
View file

@ -1,4 +1,4 @@
# NixOS configuration for toscano
# Nix configuration for toscano
#
# https://en.wikipedia.org/wiki/Joseph_Toscano
{
@ -9,9 +9,9 @@
}: {
imports = [
../../../networks/linode.nix
../../../profiles/forgejo.nix
../../../profiles/hakyll-skeleton.nix
../../../profiles/jfdic-web.nix
../../../profiles/reciproka-forgejo.nix
../../../profiles/resrok-web.nix
../../../profiles/tmateServer.nix
../../../profiles/voc-web.nix

20
profiles/forgejo.nix → profiles/reciproka-forgejo.nix
View file

@ -1,4 +1,4 @@
# NixOps configuration for the hosts running Forgejo
# Nix configuration for the Reciproka Forgejo service
{
config,
pkgs,
@ -11,13 +11,13 @@
in {
services.gitea = {
enable = true; # Enable Forgejo
appName = "JFDI Collective: Forgejo Service"; # Give the site a name
appName = "Reciproka Kolectiva: Forgejo Service"; # Give the site a name
database = {
type = "postgres"; # Database type
passwordFile = config.age.secrets.forgejo.path;
};
domain = "source.jfdic.org"; # Domain name
rootUrl = "https://source.jfdic.org/"; # Root web URL
domain = "reciproka.dev"; # Domain name
rootUrl = "https://reciproka.dev/"; # Root web URL
httpPort = 3002; # Provided unique port
package = forgejo; # a soft fork of gitea
settings = let
@ -30,7 +30,7 @@ in {
in {
mailer = {
ENABLED = true;
FROM = "source@jfdic.org";
FROM = "fonto@reciproka.dev";
};
repository = {
DEFAULT_BRANCH = "consensus";
@ -91,6 +91,13 @@ in {
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."source.jfdic.org" = {
enableACME = true; # Use ACME certs
forceSSL = true; # Force SSL
locations."/" = {
return = "301 https://reciproka.dev$request_uri";
};
};
virtualHosts."reciproka.dev" = {
# Forgejo hostname
enableACME = true; # Use ACME certs
forceSSL = true; # Force SSL
@ -101,7 +108,8 @@ in {
security.acme = {
acceptTerms = true;
certs = {
"source.jfdic.org".email = "source@jfdic.org";
"reciproka.dev".email = "admin@reciproka.co";
"source.jfdic.org".email = "admin@reciproka.co";
};
};