thrall: Enable gitea service

flake.nix

@@ -65,7 +65,8 @@
     nixOnDroidConfigurations.default = inputs.nix-on-droid.lib.nixOnDroidConfiguration {
       modules = [
         ./hosts/redmi
-        { nix.registry.nixpkgs.flake = nixpkgs; }                         { nix.nixPath = [ "nixpkgs=${nixpkgs}" ]; }
+        { nix.registry.nixpkgs.flake = nixpkgs; }
+        { nix.nixPath = [ "nixpkgs=${nixpkgs}" ]; }
       ];
     };
   };

hosts/thrall/default.nix

@@ -189,6 +189,24 @@ in {
       root = "/srv/www/failco.de";
       serverAliases = [ "www.failco.de" "mail.failco.de" ];
     };
+
+    "git.failco.de" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = { proxyPass = "http://127.0.0.1:3001/"; };
+    };
+  };
+
+  services.gitea = {
+    enable = true;
+    database.type = "sqlite3";
+    lfs.enable = true;
+    domain = "git.failco.de";
+    rootUrl = "https://git.failco.de";
+    httpAddress = "127.0.0.1";
+    httpPort = 3001;
+
+    settings.service.DISABLE_REGISTRATION = true;
   };
 
   services.fail2ban = {
@@ -226,15 +244,15 @@ in {
   mailserver = {
     enable = true;
     fqdn = "thrall.failco.de";
-    domains = [ "failco.de" ];
+    domains = [ "failco.de" "jakalx.net" ];
 
     loginAccounts = {
       "me@failco.de" = {
         hashedPasswordFile = config.age.secrets.mailPass.path;
 
-        aliases = [ "jakalx@failco.de" ];
+        aliases = [ "lx@failco.de" "alex@failco.de" ];
 
-        catchAll = [ "failco.de" ];
+        catchAll = [ "failco.de" "jakalx.net" ];
       };
     };