{ config, ... }:
{
  age.secrets.passwords-gitea-db = {
    file = ../../../secrets/passwords/gitea/db.age;
    mode = "640";
    owner = config.services.gitea.user;
    group = config.services.gitea.group;
  };

  services.gitea = {
    enable = true;
    appName = "dryb.org: Gitea Service";
    database = {
      type = "postgres";
      passwordFile = config.age.secrets.passwords-gitea-db.path;
    };
    settings = {
      server = rec {
        HTTP_PORT = 8003;
        DOMAIN = "git.dryb.org";
        ROOT_URL = "http://${DOMAIN}/";
      };
      service = {
        DISABLE_REGISTRATION = true;
      };
    };
  };
}