gitea on michael

hosts/michael/default.nix

@@ -24,11 +24,28 @@
 
 	networking.firewall.allowedTCPPorts = [80 443];
 
+	services.gitea = {
+		enable = true;
+		database = {
+			type = "sqlite3";
+			path = "/var/lib/gitea/data/gitea.db";
+		};
+		settings.server = {
+			ROOT_URL = "https://git.schmatzler.com/";
+			DOMAIN = "git.schmatzler.com";
+			HTTP_ADDR = "127.0.0.1";
+			HTTP_PORT = 3000;
+		};
+	};
+
 	services.caddy = {
 		enable = true;
 		virtualHosts."knot.schmatzler.com".extraConfig = ''
 			reverse_proxy localhost:5555
 		'';
+		virtualHosts."git.schmatzler.com".extraConfig = ''
+			reverse_proxy localhost:3000
+		'';
 	};
 
 	services.openssh = {

hosts/tahani/default.nix

@@ -96,26 +96,11 @@
 		};
 	};
 
-	services.gitea = {
-		enable = true;
-		settings = {
-			server = {
-				ROOT_URL = "https://gitea.manticore-hippocampus.ts.net/";
-				DOMAIN = "gitea.manticore-hippocampus.ts.net";
-				HTTP_ADDR = "127.0.0.1";
-				HTTP_PORT = 8380;
-			};
-		};
-	};
-
 	services.caddy = {
 		enable = true;
 		virtualHosts."tahani.manticore-hippocampus.ts.net".extraConfig = ''
 			respond "OK"
 		'';
-		virtualHosts."gitea.manticore-hippocampus.ts.net".extraConfig = ''
-			reverse_proxy localhost:8380
-		'';
 	};
 
 	# Allow Caddy to fetch Tailscale HTTPS certs