feat: initial commit

services/default.nix

@@ -0,0 +1,7 @@
+{ ... }:
+{
+  imports = [
+    ./openssh.nix
+    ./forgejo.nix
+  ];
+}

services/forgejo.nix

@@ -0,0 +1,22 @@
+{...}:
+let
+  serv = import ../config/services.nix;
+  git = serv.git;
+in
+{
+  services.forgejo = {
+    enable = true;
+    database.type = "postgres";
+    lfs.enable = true;
+    settings = {
+      server = {
+        DOMAIN = git.domain;
+        ROOT_URL = "https://${git.domain}/";
+        HTTP_PORT = git.port;
+      };
+      service.DISABLE_REGISTRATION = true;
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ git.port ];
+}

services/openssh.nix

@@ -0,0 +1,17 @@
+{ ... }:
+let
+  opensshConfig = import ../config/openssh.nix;
+  usersWithKeys = opensshConfig.ssh_users;
+in 
+{
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = true;
+      PermitRootLogin = "no";
+      AllowUsers = usersWithKeys;
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ 22 ];
+}