titaniumtown/server-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix gitea and stuff

Browse Source
This commit is contained in:
Simon Gardling 2025-02-01 23:10:51 -05:00
parent a22012df2c
commit 73111b87cf
Signed by: titaniumtown
GPG Key ID: 9AB28AC10ECE533D
3 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
configuration.nix
View File

@ -102,6 +102,7 @@
services.openssh = { services.openssh = {
enable = true; enable = true;
settings = { settings = {
AllowUsers = [ username ];
PasswordAuthentication = false; PasswordAuthentication = false;
PermitRootLogin = "no"; PermitRootLogin = "no";
}; };

7
services/gitea.nix
View File

@ -16,10 +16,12 @@
settings = { settings = {
server = { server = {
SSH_USER = "gitea";
DOMAIN = service_configs.gitea.domain; DOMAIN = service_configs.gitea.domain;
ROOT_URL = "https://" + config.services.gitea.settings.server.DOMAIN; ROOT_URL = "https://" + config.services.gitea.settings.server.DOMAIN;
HTTP_PORT = service_configs.ports.gitea; HTTP_PORT = service_configs.ports.gitea;
LANDING_PAGE = "/explore/repos"; LANDING_PAGE = "/explore/repos";
DISABLE_HTTP_GIT = true;
}; };
session = { session = {
# https cookies or smth # https cookies or smth
@ -35,7 +37,8 @@
''; '';
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
"d ${config.services.gitea.stateDir} 0770 ${config.services.gitea.user} ${config.services.gitea.group}" # 0700 for ssh permission reasons
"d ${config.services.gitea.stateDir} 0700 ${config.services.gitea.user} ${config.services.gitea.group}"
]; ];
services.postgresql = { services.postgresql = {
@ -49,6 +52,8 @@
]; ];
}; };
services.openssh.settings.AllowUsers = [ config.services.gitea.user ];
users.users.${username}.extraGroups = [ users.users.${username}.extraGroups = [
config.services.gitea.group config.services.gitea.group
]; ];

1
services/postgresql.nix
View File

@ -12,6 +12,7 @@
}; };
systemd.tmpfiles.rules = [ systemd.tmpfiles.rules = [
# postgresql requires 0700
"d ${config.services.postgresql.dataDir} 0700 postgresql postgresql" "d ${config.services.postgresql.dataDir} 0700 postgresql postgresql"
]; ];