Migrated Gitea; Catppuccin fails
This commit is contained in:
206
nixos/roles/gitea.nix
Normal file
206
nixos/roles/gitea.nix
Normal file
@@ -0,0 +1,206 @@
|
||||
{
|
||||
pkgs,
|
||||
lib,
|
||||
config,
|
||||
...
|
||||
}:
|
||||
|
||||
let
|
||||
giteaTheme = pkgs.fetchFromGitHub {
|
||||
owner = "catppuccin";
|
||||
repo = "gitea";
|
||||
rev = "main";
|
||||
sha256 = "sha256-ba5Bh/eTg2Dn80vyuudDpZVbKK1EDyv2rFUSwgMONq0=";
|
||||
};
|
||||
|
||||
domain = "192.168.2.31"; # swap to git.cyperpunk.de for prod
|
||||
httpPort = 9000;
|
||||
sshPort = 12222;
|
||||
in
|
||||
{
|
||||
sops.secrets = {
|
||||
"gitea/dbPassword" = {
|
||||
owner = "gitea";
|
||||
group = "gitea";
|
||||
mode = "0444";
|
||||
};
|
||||
"gitea/internalToken" = {
|
||||
owner = "gitea";
|
||||
group = "gitea";
|
||||
};
|
||||
"gitea/lfsJwtSecret" = {
|
||||
owner = "gitea";
|
||||
group = "gitea";
|
||||
};
|
||||
"gitea/mailerPassword" = {
|
||||
owner = "gitea";
|
||||
group = "gitea";
|
||||
};
|
||||
};
|
||||
|
||||
services.postgresql = {
|
||||
enable = true;
|
||||
package = pkgs.postgresql_14;
|
||||
ensureDatabases = [ "gitea" ];
|
||||
ensureUsers = [
|
||||
{
|
||||
name = "gitea";
|
||||
ensureDBOwnership = true;
|
||||
}
|
||||
];
|
||||
authentication = lib.mkOverride 10 ''
|
||||
local all all trust
|
||||
host all all 127.0.0.1/32 md5
|
||||
host all all ::1/128 md5
|
||||
'';
|
||||
};
|
||||
|
||||
systemd.services.gitea-db-password = {
|
||||
description = "Set gitea postgres user password";
|
||||
requires = [ "postgresql.service" ];
|
||||
after = [ "postgresql.service" ];
|
||||
before = [ "gitea.service" ];
|
||||
wantedBy = [ "gitea.service" ];
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
User = "postgres";
|
||||
RemainAfterExit = true;
|
||||
};
|
||||
script = ''
|
||||
pass=$(cat ${config.sops.secrets."gitea/dbPassword".path})
|
||||
${pkgs.postgresql_14}/bin/psql -c \
|
||||
"ALTER USER gitea WITH PASSWORD '$pass';"
|
||||
'';
|
||||
};
|
||||
|
||||
services.gitea = {
|
||||
enable = true;
|
||||
package = pkgs.gitea;
|
||||
user = "gitea";
|
||||
group = "gitea";
|
||||
|
||||
database = {
|
||||
type = "postgres";
|
||||
host = "127.0.0.1";
|
||||
port = 5432;
|
||||
name = "gitea";
|
||||
user = "gitea";
|
||||
passwordFile = config.sops.secrets."gitea/dbPassword".path;
|
||||
};
|
||||
|
||||
settings = {
|
||||
server = {
|
||||
DOMAIN = domain;
|
||||
HTTP_ADDR = "0.0.0.0";
|
||||
HTTP_PORT = httpPort;
|
||||
SSH_PORT = sshPort;
|
||||
SSH_LISTEN_PORT = sshPort;
|
||||
ROOT_URL = "http://${domain}:${toString httpPort}/";
|
||||
DISABLE_SSH = false;
|
||||
START_SSH_SERVER = true;
|
||||
};
|
||||
|
||||
# security = {
|
||||
# SECRET_KEY_URI = "file://${config.sops.secrets."gitea/secretKey".path}";
|
||||
# INTERNAL_TOKEN_URI = "file://${config.sops.secrets."gitea/internalToken".path}";
|
||||
# };
|
||||
|
||||
#lfs = {
|
||||
# JWT_SECRET_URI = "file://${config.sops.secrets."gitea/lfsJwtSecret".path}";
|
||||
# };
|
||||
|
||||
ui = {
|
||||
DEFAULT_THEME = "catppuccin-mocha-green";
|
||||
THEMES = lib.concatStringsSep "," [
|
||||
# built-in
|
||||
"gitea"
|
||||
"arc-green"
|
||||
# latte
|
||||
"catppuccin-latte-blue"
|
||||
"catppuccin-latte-flamingo"
|
||||
"catppuccin-latte-green"
|
||||
"catppuccin-latte-lavender"
|
||||
"catppuccin-latte-maroon"
|
||||
"catppuccin-latte-mauve"
|
||||
"catppuccin-latte-peach"
|
||||
"catppuccin-latte-pink"
|
||||
"catppuccin-latte-red"
|
||||
"catppuccin-latte-rosewater"
|
||||
"catppuccin-latte-sapphire"
|
||||
"catppuccin-latte-sky"
|
||||
"catppuccin-latte-teal"
|
||||
"catppuccin-latte-yellow"
|
||||
# frappe
|
||||
"catppuccin-frappe-blue"
|
||||
"catppuccin-frappe-flamingo"
|
||||
"catppuccin-frappe-green"
|
||||
"catppuccin-frappe-lavender"
|
||||
"catppuccin-frappe-maroon"
|
||||
"catppuccin-frappe-mauve"
|
||||
"catppuccin-frappe-peach"
|
||||
"catppuccin-frappe-pink"
|
||||
"catppuccin-frappe-red"
|
||||
"catppuccin-frappe-rosewater"
|
||||
"catppuccin-frappe-sapphire"
|
||||
"catppuccin-frappe-sky"
|
||||
"catppuccin-frappe-teal"
|
||||
"catppuccin-frappe-yellow"
|
||||
# macchiato
|
||||
"catppuccin-macchiato-blue"
|
||||
"catppuccin-macchiato-flamingo"
|
||||
"catppuccin-macchiato-green"
|
||||
"catppuccin-macchiato-lavender"
|
||||
"catppuccin-macchiato-maroon"
|
||||
"catppuccin-macchiato-mauve"
|
||||
"catppuccin-macchiato-peach"
|
||||
"catppuccin-macchiato-pink"
|
||||
"catppuccin-macchiato-red"
|
||||
"catppuccin-macchiato-rosewater"
|
||||
"catppuccin-macchiato-sapphire"
|
||||
"catppuccin-macchiato-sky"
|
||||
"catppuccin-macchiato-teal"
|
||||
"catppuccin-macchiato-yellow"
|
||||
# mocha
|
||||
"catppuccin-mocha-blue"
|
||||
"catppuccin-mocha-flamingo"
|
||||
"catppuccin-mocha-green"
|
||||
"catppuccin-mocha-lavender"
|
||||
"catppuccin-mocha-maroon"
|
||||
"catppuccin-mocha-mauve"
|
||||
"catppuccin-mocha-peach"
|
||||
"catppuccin-mocha-pink"
|
||||
"catppuccin-mocha-red"
|
||||
"catppuccin-mocha-rosewater"
|
||||
"catppuccin-mocha-sapphire"
|
||||
"catppuccin-mocha-sky"
|
||||
"catppuccin-mocha-teal"
|
||||
"catppuccin-mocha-yellow"
|
||||
];
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
# symlink catppuccin css files into gitea's custom dir on every service start
|
||||
systemd.services.gitea.preStart = lib.mkAfter ''
|
||||
themeDir="/var/lib/gitea/custom/public/assets/css"
|
||||
mkdir -p "$themeDir"
|
||||
for f in ${giteaTheme}/theme/*.css; do
|
||||
name=$(basename "$f")
|
||||
ln -sf "$f" "$themeDir/$name"
|
||||
done
|
||||
'';
|
||||
|
||||
users.users.gitea = {
|
||||
isSystemUser = true;
|
||||
group = "gitea";
|
||||
home = "/var/lib/gitea";
|
||||
createHome = true;
|
||||
};
|
||||
users.groups.gitea = { };
|
||||
users.users.postgres.extraGroups = [ "gitea" ];
|
||||
|
||||
networking.firewall.allowedTCPPorts = [
|
||||
httpPort
|
||||
sshPort
|
||||
];
|
||||
}
|
||||
38
nixos/roles/restore.sh
Normal file
38
nixos/roles/restore.sh
Normal file
@@ -0,0 +1,38 @@
|
||||
#!/usr/bin/env bash
|
||||
# Usage: sudo ./restore.sh gitea_dump_*.sql gitea_data_*.tar.gz
|
||||
set -euo pipefail
|
||||
|
||||
SQL_DUMP="${1:?provide the .sql dump as first argument}"
|
||||
DATA_ARCHIVE="${2:?provide the data .tar.gz as second argument}"
|
||||
|
||||
GITEA_HOME="/var/lib/gitea"
|
||||
GITEA_USER="gitea"
|
||||
DB_NAME="gitea"
|
||||
DB_USER="gitea"
|
||||
|
||||
echo "[1/5] Stopping gitea..."
|
||||
systemctl stop gitea
|
||||
|
||||
echo "[2/5] Waiting for postgres..."
|
||||
until sudo -u postgres psql -c '\q' 2>/dev/null; do sleep 1; done
|
||||
|
||||
echo "[3/5] Restoring database..."
|
||||
sudo -u postgres psql -c "DROP DATABASE IF EXISTS ${DB_NAME};"
|
||||
sudo -u postgres psql -c "CREATE DATABASE ${DB_NAME} OWNER ${DB_USER};"
|
||||
sudo -u postgres psql -d "$DB_NAME" < "$SQL_DUMP"
|
||||
echo " done."
|
||||
|
||||
echo "[4/5] Restoring gitea data..."
|
||||
# data/gitea from the docker volume -> /var/lib/gitea
|
||||
tar xzf "$DATA_ARCHIVE" --strip-components=2 -C "$GITEA_HOME" ./data/gitea
|
||||
|
||||
# ssh host keys -> /var/lib/gitea/ssh
|
||||
mkdir -p "$GITEA_HOME/ssh"
|
||||
tar xzf "$DATA_ARCHIVE" --strip-components=1 -C "$GITEA_HOME/ssh" ./ssh
|
||||
|
||||
chown -R "$GITEA_USER":"$GITEA_USER" "$GITEA_HOME"
|
||||
echo " done."
|
||||
|
||||
echo "[5/5] Starting gitea..."
|
||||
systemctl start gitea
|
||||
systemctl status gitea --no-pager
|
||||
Reference in New Issue
Block a user