{ config, pkgs, ... }:

let
  fqdn = "git.bib3.de";
in
{
  services.nginx = {
    enable = true;
    virtualHosts.${fqdn} = {
      forceSSL = true;
      enableACME=true;
      locations."/".proxyPass = "http://127.0.0.1:3000";
      extraConfig = ''
        client_max_body_size 0;
      '';
    };
  };

  services.gitea = {
    enable = true;
    rootUrl = "https://git.bib3.de";
    httpAddress = "127.0.0.1";
    disableRegistration = true;
    cookieSecure = true;
  };
}