flora-6/gitea: Move towards docker containers
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing

This commit is contained in:
Benjamin Bädorf 2023-01-29 21:51:29 +01:00
parent a7d684e1f8
commit 1874463c4e
No known key found for this signature in database
GPG key ID: 4406E80E13CD656C

View file

@ -16,6 +16,67 @@
owner = "gitea"; owner = "gitea";
}; };
users.users.git = {
description = "Gitea SSH Service";
home = "/var/lib/gitea/git";
useDefaultShell = false;
uid = 995;
isSystemUser = true;
};
virtualisation = {
docker = {
enable = true; # sadly podman is not supported rightnow
};
oci-containers = {
backend = "docker";
containers."gitea" = {
image = "gitea:gitea:1.18.3";
autoStart = true;
user = "995";
ports = [
"127.0.0.1:3000:3000"
"127.0.0.1:2222:22"
];
volumes = [
"/var/lib/gitea:/data"
# Secrets go in the app.ini file, the rest wil be done in nix via environment variables
"/var/lib/gitea/custom/conf/app.ini:/${config.age.secrets.gitea-secrets-app-ini.path}"
"/etc/timezone:/etc/timezone:ro"
"/etc/localtime:/etc/localtime:ro"
];
extraOptions = [
"--network=gitea"
];
environment = {
USER_UID = "postgres";
USER_GID = "postgres";
RUN_MODE = "prod";
SSH_DOMAIN = "git.pub.solar";
ROOT_URL = "git.pub.solar";
DB_TYPE = "postgres";
DB_HOST = "gitea-db";
DISABLE_REGISTRATION = "true";
};
};
containers."gitea-db" = {
image = "postgres:14";
autoStart = true;
volumes = [
"/var/lib/gitea-db:/var/lib/postgresql/data"
];
extraOptions = [
"--network=gitea"
];
environmentFiles = [
config.age.secrets.gitea-db-secrets.path
];
};
};
};
# gitea # gitea
services.gitea = { services.gitea = {
enable = true; enable = true;