{ config, ... }:
let
  metaLib = config.meta.lib;
in
{
  flake.modules.nixos.gitea =
    { lib, ... }:
    lib.mkMerge [
      {
        services.gitea = {
          enable = true;

          settings = {
            server = {
              DOMAIN = "git.jelles.net";
              ROOT_URL = "https://git.jelles.net/";
              HTTP_PORT = 3001;
              HTTP_ADDR = "127.0.0.1";

              START_SSH_SERVER = false;
              SSH_PORT = 22;
            };

            service.DISABLE_REGISTRATION = true;
          };
        };
      }

      {
        services.openssh.settings.AllowUsers = [ "gitea" ];
      }

      (metaLib.mkCaddyReverseProxy {
        domain = "git.jelles.net";
        port = 3001;
      })
    ];
}