Small refactor and added prowlarr

nixos/server/package-configs/forgejo/configuration.nix

@@ -0,0 +1,76 @@
+{
+  inputs,
+  outputs,
+  lib,
+  config,
+  pkgs,
+  ...
+}: {
+  imports = [];
+  users.groups.gitea = {};
+  users.users = {
+    gitea = {
+      isSystemUser = true;
+      isNormalUser = false;
+      group = "gitea";
+      extraGroups = ["virtualMail"];
+    };
+  };
+  sops.secrets."mailpassunhash".mode = "0440";
+  sops.secrets."mailpassunhash".owner = config.users.users.virtualMail.name;
+
+  services.forgejo = {
+    enable = true;
+    user = "gitea";
+    group = "gitea";
+    stateDir = "/var/lib/gitea";
+    #TODO: different mail passwords for different services
+    mailerPasswordFile = config.sops.secrets."mailpassunhash".path;
+    database = {
+      user = "gitea";
+      name = "gitea";
+      type = "postgres";
+    };
+    settings = {
+      "cron.sync_external_users" = {
+        RUN_AT_START = true;
+        SCHEDULE = "@every 24h";
+        UPDATE_EXISTING = true;
+      };
+      mailer = {
+        ENABLED = true;
+        PROTOCOL = "sendmail";
+        FROM = "no-reply@git.lillianviolet.dev";
+        SENDMAIL_PATH = "${pkgs.system-sendmail}/bin/sendmail";
+        SENDMAIL_ARGS = "-bs";
+      };
+      repository = {
+        ENABLE_PUSH_CREATE_USER = true;
+      };
+      federation = {
+        ENABLED = true;
+      };
+      other = {
+        SHOW_FOOTER_VERSION = false;
+      };
+      service.DISABLE_REGISTRATION = true;
+      server = {
+        DOMAIN = "git.lillianviolet.dev";
+        ROOT_URL = "https://git.lillianviolet.dev/";
+        HTTP_PORT = 3218;
+      };
+    };
+  };
+
+  services.nginx = {
+    virtualHosts = {
+      "git.lillianviolet.dev" = {
+        forceSSL = true;
+        enableACME = true;
+        locations."/" = {
+          proxyPass = "http://localhost:3218";
+        };
+      };
+    };
+  };
+}