servius/dotfiles
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

feat: Disable gitea again

Browse Source
This commit is contained in:
uttarayan21
2025-08-14 02:26:22 +05:30
parent f1bff496b8
commit 042bf432d8
3 changed files with 15 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
home/programs/default.nix
View File

@@ -2,7 +2,8 @@
pkgs, pkgs,
device, device,
... ...
}: { }:
{
imports = [ imports = [
../../modules ../../modules
./aichat.nix ./aichat.nix
@@ -17,7 +18,6 @@
./fzf.nix ./fzf.nix
./gh.nix ./gh.nix
./git.nix ./git.nix
./gitea.nix
./mpd.nix ./mpd.nix
./ncpamixer.nix ./ncpamixer.nix
./nh.nix ./nh.nix
@@ -48,7 +48,8 @@
# ./template.nix # ./template.nix
# ./zellij.nix # ./zellij.nix
]; ];
home.packages = with pkgs; home.packages =
with pkgs;
[ [
_1password-cli _1password-cli
alejandra alejandra
@@ -84,6 +85,6 @@
nerd-fonts.hasklug nerd-fonts.hasklug
nerd-fonts.symbols-only nerd-fonts.symbols-only
] ]
++ lib.optionals device.isLinux [] ++ lib.optionals device.isLinux [ ]
++ lib.optionals device.isDarwin []; ++ lib.optionals device.isDarwin [ ];
} }

3
nixos/mirai/services/default.nix
View File

@@ -1,5 +1,4 @@
{ ... }: {...}: {
{
imports = [ imports = [
./atuin.nix ./atuin.nix
./authelia.nix ./authelia.nix

14
nixos/mirai/services/gitea.nix
View File

@@ -20,7 +20,6 @@
"GITEA_REGISTRATION_TOKEN.env".content = '' "GITEA_REGISTRATION_TOKEN.env".content = ''
TOKEN=${config.sops.placeholder."gitea/registration"} TOKEN=${config.sops.placeholder."gitea/registration"}
''; '';
}; };
}; };
services = { services = {
@@ -29,6 +28,9 @@
lfs.enable = true; lfs.enable = true;
settings = { settings = {
service = { service = {
DISABLE_REGISTRATION = false;
ALLOW_ONLY_EXTERNAL_REGISTRATION = true;
SHOW_REGISTRATION_BUTTON = false;
ENABLE_REVERSE_PROXY_AUTHENTICATION = true; ENABLE_REVERSE_PROXY_AUTHENTICATION = true;
ENABLE_REVERSE_PROXY_AUTO_REGISTRATION = true; ENABLE_REVERSE_PROXY_AUTO_REGISTRATION = true;
}; };
@@ -55,7 +57,7 @@
gitea-actions-runner = { gitea-actions-runner = {
instances = { instances = {
mirai = { mirai = {
enable = true; enable = false;
name = "mirai"; name = "mirai";
url = "https://git.darksailor.dev"; url = "https://git.darksailor.dev";
labels = [ labels = [
@@ -67,7 +69,6 @@
}; };
caddy = { caddy = {
virtualHosts."git.darksailor.dev".extraConfig = '' virtualHosts."git.darksailor.dev".extraConfig = ''
# import auth
reverse_proxy localhost:3000 reverse_proxy localhost:3000
''; '';
}; };
@@ -93,24 +94,25 @@
oidc = { oidc = {
clients = [ clients = [
{ {
client_name = "gitea"; client_name = "Gitea: Darksailor";
client_id = "gitea"; client_id = "gitea";
client_secret = ''{{ secret "${config.sops.secrets."authelia/oidc/gitea/client_secret".path}" }}''; client_secret = ''{{ secret "${config.sops.secrets."authelia/oidc/gitea/client_secret".path}" }}'';
public = false; public = false;
authorization_policy = "one_factor"; authorization_policy = "one_factor";
require_pkce = false; require_pkce = false;
# pkce_challenge_method = "S256";
redirect_uris = [ redirect_uris = [
"https://git.darksailor.dev/user/oauth2/authelia/callback" "https://git.darksailor.dev/user/oauth2/authelia/callback"
]; ];
scopes = [ scopes = [
"openid" "openid"
"profile"
"email" "email"
"profile"
]; ];
response_types = [ "code" ]; response_types = [ "code" ];
grant_types = [ "authorization_code" ]; grant_types = [ "authorization_code" ];
userinfo_signed_response_alg = "none"; userinfo_signed_response_alg = "none";
token_endpoint_auth_method = "client_secret_post"; token_endpoint_auth_method = "client_secret_basic";
} }
]; ];
}; };