{...}:
let
  serv = import ../config/services.nix;
  git = serv.git;
in
{
  services.forgejo = {
    enable = true;
    database.type = "postgres";
    lfs.enable = true;
    settings = {
      server = {
        DOMAIN = git.domain;
        ROOT_URL = "https://${git.domain}/";
        HTTP_PORT = git.port;
      };
      service.DISABLE_REGISTRATION = true;
    };
  };

  networking.firewall.allowedTCPPorts = [ git.port ];
}