77 current 2025-10-08 00:10:23 25.05.20251001.5b5be50 6.12.49 *

flake.nix

@@ -1,6 +1,6 @@
 # flake for blakes nixos config
 # define new devices in outputs
-# generation: 69 current  2025-10-07 23:14:40  25.05.20251001.5b5be50  6.12.49                          *
+# generation: 77 current  2025-10-08 00:10:23  25.05.20251001.5b5be50  6.12.49                          *
 {
   description = "blakes nix config";
   inputs = {

modules/homelab/services/gitea/default.nix

@@ -41,6 +41,7 @@ in
       description = lib.mkForce "gitea server user";
       uid = ids;
       isSystemUser = true;
+      shell = pkgs.bash;
       home = "/var/lib/gitea";
       createHome = true;
       group = "gitea";
@@ -59,6 +60,9 @@ in
           DOMAIN = "git.blakedheld.xyz";
           HTTP_PORT = cfg.port;
           SSH_PORT = cfg.ssh_port;
+          START_SSH_SERVER = true;
+          ENABLE_PUSH_CREATE_USER = true;
+
         };
       };
       database = {
@@ -73,7 +77,7 @@ in
     networking.firewall.allowedTCPPorts = [ cfg.port cfg.ssh_port ];
 
     # internal reverse proxy entry
-    services.nginx.virtualHosts."gitea.snowbelle.lan" = {
+    services.nginx.virtualHosts."git.snowbelle.lan" = {
       enableACME = false;
       forceSSL = true;
       sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
@@ -83,11 +87,11 @@ in
       };
     };
      # external reverse proxy entry
-     services.nginx.virtualHosts."gitea.blakedheld.xyz" = {
+     services.nginx.virtualHosts."git.blakedheld.xyz" = {
-      enableACME = false;
+      enableACME = true;
       forceSSL = true;
-      sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
+#      sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
-      sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
+#      sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString cfg.port}";
       };

users/blake/home.nix

@@ -63,7 +63,11 @@
     enable = true;
     matchBlocks = {
       "git.blakedheld.xyz" = {
-        user = "git";
+        user = "gitea";
+        identityFile = "~/.ssh/id_snowbelle";
+      };
+      "git.snowbelle.lan" = {
+        user = "gitea";
         identityFile = "~/.ssh/id_snowbelle";
       };
       "dockers" = {