{ config, ... }:
{
  age.secrets.passwords-gitea-db = {
    file = ../../../secrets/passwords/gitea/db.age;
    mode = "640";
    owner = config.services.gitea.user;
    group = config.services.gitea.group;
  };

  services.gitea = rec {
    enable = true;
    appName = "dryb.org: Gitea Service";
    database = {
      type = "postgres";
      passwordFile = config.age.secrets.passwords-gitea-db.path;
    };
    domain = "git.dryb.org";
    rootUrl = "http://${domain}/";
    httpPort = 8003;
    settings = {
      service = {
        DISABLE_REGISTRATION = true;
      };
    };
  };
}