System/system-specific/matrix/gitea.nix

{ config, pkgs, lib, ... }:
{
  services.gitea = {
    enable = true;
    appName = "Rust Community Matrix Homeserver";
    domain = "gitea.community.rs";
    rootUrl = "https://gitea.community.rs";
    database = {
      type = "sqlite3";
    };
    httpPort = 3001;
    settings = {
      ui = {
        DEFAULT_THEME = "arc-green";
      };
      service = {
        DISABLE_REGISTRATION = lib.mkForce true;
      };
      repository = {
        DEFAULT_BRANCH = "trunk";
      };
    };
    lfs.enable = true;
  };
  # Setup the docker networking for woodpecker
  systemd.services.init-woodpecker-network-and-files = {
    description = "Create the network bridge woodpecker-br for filerun.";
    after = [ "network.target" ];
    wantedBy = [ "multi-user.target" ];
    before = [ "docker-woodpecker-server.service" ];

    serviceConfig.Type = "oneshot";
    script =
      let dockercli = "${config.virtualisation.docker.package}/bin/docker";
      in
      ''
         # Put a true at the end to prevent getting non-zero return code, which will
         # crash the whole service.
         check=$(${dockercli} network ls | grep "woodpecker-br" || true)
         if [ -z "$check" ]; then
           ${dockercli} network create woodpecker-br
        else
          echo "woodpecker-br already exists in docker"
        fi
      '';
  };
  # Setup woodpecker
  virtualisation.oci-containers.containers = {
    woodpecker-server = {
      image = "woodpeckerci/woodpecker-server:latest";
      ports = [ "8000:8000" ];
      volumes = [ "woodpecker-server-data:/var/lib/drone" ];
      environment = {
        WOODPECKER_OPEN = "true";
        WOODPECKER_GITEA = "true";
        WOODPECKER_HOST = "https://woodpecker.community.rs";
        WOODPECKER_GITEA_URL = "https://gitea.community.rs";
        WOODPECKER_LIMIT_CPU_QUOTA = "200001";
        WOODPECKER_LIMIT_MEM = "2147483648";
        WOODPECKER_ADMIN = "thatonelutenist";
        WOODPECKER_ENVIRONMENT = "SCCACHE_REDIS:redis://172.23.108.12";
      };
      environmentFiles = [ "/var/lib/secret/woodpecker-server" ];
      extraOptions = [ "--network=woodpecker-br" ];
    };
    woodpecker-agent = {
      image = "woodpeckerci/woodpecker-agent:latest";
      dependsOn = [ "woodpecker-server" ];
      volumes = [ "/var/run/docker.sock:/var/run/docker.sock" ];
      environment = {
        WOODPECKER_SERVER = "woodpecker-server:9000";
        WOODPECKER_MAX_PROCS = "1";
      };
      environmentFiles = [ "/var/lib/secret/woodpecker-agent" ];
      extraOptions = [ "--network=woodpecker-br" ];
    };
  };


  services.nginx = {
    virtualHosts."gitea.community.rs" = {
      enableACME = true;
      forceSSL = true;
      locations."/".proxyPass = "http://localhost:3001";
    };
    virtualHosts."woodpecker.community.rs" = {
      enableACME = true;
      forceSSL = true;
      locations."/".proxyPass = "http://localhost:8000";
    };
  };
}