[gitea] Deploy

lib/systems/fugitive/default.nix

@@ -1,15 +1,27 @@
 { impermanence, pkgs, ... }:
+
+let 
+
+  ports = {
+    ssh = [ 2322 2323 2324 ];
+    gitea = 10010;
+  };
+
+in
 {
 
   imports = [
     ./hardware.nix
+    ../../modules/gitea
     ../../users/christian
   ];
 
   services = {
+    gitea.enable = true;
+    nginx.enable = true;
     openssh = {
       enable = true;
-      ports = [ 2322 2323 2324 ];
+      ports = ports.ssh;
     };
   };
 
@@ -23,6 +35,11 @@
     };
   };
 
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 80 443 ];
+  };
+
   security = {
     sudo = {
       wheelNeedsPassword = false;
@@ -30,6 +47,10 @@
         Defaults lecture = never
       '';
     };
+    acme = {
+      acceptTerms = true;
+      defaults.email = "cert@ctsk.xyz";
+    };
   };
 
   nix.settings = {