{ config, lib, pkgs, ... }:


{
  services.gitea = {
    enable = true;
    captcha = {
      enable = true;
    };
    database = {
      type = "postgres";
    };
    settings = {
      server = {
        DISABLE_REGISTRATION = false;
        DOMAIN = "git.k3t.dev";
        HTTP_ADDR = "127.0.0.1";
        HTTP_PORT = 34951;
        ROOT_URL = "https://git.k3t.dev/";
        SSH_PORT = 34952;
      };
    };
  };
  services.nginx.virtualHosts."git.k3t.dev" = {
    forceSSL = true;
    enableACME = true;
    locations."/" = {
      proxyPass = ''http://127.0.0.1:${toString config.services.gittea.settinggs.server.HTTP_PORT}'';
    };
  };
  #services.nginx.virtualHosts."git.k3t.dev".extraConfig = ''
  #  encode zstd gzip
  #  reverse_proxy :${toString config.services.gittea.settinggs.server.HTTP_PORT} {
  #      header_up X-Real-IP {remote_host}
  #  }
  #'';
}