{ config, ... }:
let
  metaRepo = config.meta.lib.repo;
  metaLib = config.meta.lib;
  service = metaRepo.services.gitea;
in
{
  flake.modules.nixos.gitea =
    { lib, ... }:
    lib.mkMerge [
      {
        services.gitea = {
          enable = true;

          settings = {
            server = {
              DOMAIN = service.domain;
              ROOT_URL = service.url;
              HTTP_PORT = service.port;
              HTTP_ADDR = service.host;

              START_SSH_SERVER = false;
              SSH_PORT = 22;
            };

            service.DISABLE_REGISTRATION = true;
          };
        };
      }

      {
        services.openssh.settings.AllowUsers = [ "gitea" ];
      }

      (metaLib.mkCaddyReverseProxy {
        inherit (service)
          domain
          port
          ;
      })
    ];
}