{ config, pkgs, lib, ... }: { services.gitea = { enable = true; appName = "Rust Community Matrix Homeserver"; domain = "gitea.community.rs"; rootUrl = "https://gitea.community.rs"; database = { type = "sqlite3"; }; httpPort = 3001; settings = { ui = { DEFAULT_THEME = "arc-green"; }; service = { DISABLE_REGISTRATION = lib.mkForce true; }; repository = { DEFAULT_BRANCH = "trunk"; }; }; lfs.enable = true; }; # Setup the docker networking for woodpecker systemd.services.init-woodpecker-network-and-files = { description = "Create the network bridge woodpecker-br for filerun."; after = [ "network.target" ]; wantedBy = [ "multi-user.target" ]; before = [ "docker-woodpecker-server" ]; serviceConfig.Type = "oneshot"; script = let dockercli = "${config.virtualisation.docker.package}/bin/docker"; in '' # Put a true at the end to prevent getting non-zero return code, which will # crash the whole service. check=$(${dockercli} network ls | grep "woodpecker-br" || true) if [ -z "$check" ]; then ${dockercli} network create woodpecker-br else echo "woodpecker-br already exists in docker" fi ''; }; # Setup woodpecker virtualisation.oci-containers.containers = { woodpecker-server = { image = "woodpeckerci/woodpecker-server:latest"; ports = [ "8000:8000" ]; volumes = [ "woodpecker-server-data:/var/lib/drone" ]; environment = { WOODPECKER_OPEN = "true"; WOODPECKER_GITEA = "true"; WOODPECKER_HOST = "https://woodpecker.community.rs"; WOODPECKER_GITEA_URL = "https://gitea.community.rs"; WOODPECKER_LIMIT_CPU_QUOTA = "200001"; WOODPECKER_LIMIT_MEM = "2147483648"; WOODPECKER_ADMIN = "thatonelutenist"; WOODPECKER_ENVIRONMENT = "SCCACHE_REDIS:redis://172.23.108.12"; }; environmentFiles = [ "/var/lib/secret/woodpecker-server" ]; extraOptions = [ "--network=woodpecker-br" ]; }; woodpecker-agent = { image = "woodpeckerci/woodpecker-agent:latest"; dependsOn = [ "woodpecker-server" ]; volumes = [ "/var/run/docker.sock:/var/run/docker.sock" ]; environment = { WOODPECKER_SERVER = "woodpecker-server:9000"; WOODPECKER_MAX_PROCS = "1"; }; environmentFiles = [ "/var/lib/secret/woodpecker-agent" ]; extraOptions = [ "--network=woodpecker-br" ]; }; }; services.nginx = { virtualHosts."gitea.community.rs" = { enableACME = true; forceSSL = true; locations."/".proxyPass = "http://localhost:3001"; }; virtualHosts."woodpecker.community.rs" = { enableACME = true; forceSSL = true; locations."/".proxyPass = "http://localhost:8000"; }; }; }