#
# System notifications
#

{ config, lib, pkgs, ... }:

{
  services.gitea = {
    enable = true;
    #dump.enable = true;
    rootUrl = "https://git.kabtop.de"
    lfs.enable = true;
    httpAdress = "localhost";
    dump.type = "tar.xz";
    domain = "git.kabtop.de";
    database.type = "postgres";
    database.user = "gitea";
    #database.password = "secret123";
    database.name = "giteadb"
    appName = "Kabtop Git";
    settings = {
        RUN_MODE = "prod";
        server = {
            START_SSH_SERVER = true;
            SSH_SERVER_CIPHERS = "";
            SSH_SERVER_KEY_EXCHANGES = "";
            SSH_SERVER_MACS = "";
            ENABLE_GZIP = true;
            #LFS_JWT_SECRET = "secret123";
        };
        security = {
            MIN_PASSWORD_LENGTH = 8;
            PASSWORD_CHECK_PWN = true;
            PASSWORD_HASH_ALGO = "argon2";
        };
        oauth2 = {
            ENABLE = true;
            #JWT_SECRET = "secret123";
        };
        repository = {
            MAX_CREATION_LIMIT = 100;
        };
        ui = {
            SHOW_USER_EMAIL = false;
            DEFAULT_THEME = "arc-green";
        };
        openid = {
            ENABLE_OPENID_SIGNIN = true;
            WHITELISTED_URIS = "https://auth.kabtop.de";
        };
        oauth2_client = {
            ENABLE_AUTO_REGISTRATION = true;
        };
        mailer = {
            ENABLED = true;
            SUBJECT_PREFIX = "Kabtop Gitea";
            HOST = "in-v3.mailjet.com:587";
            PROTOCOL = "";
            FROM = '"Kabtop Gitea" <postmaster@kabtop.de>';
            USER = "secrest123";
            PASSWD = "secret123";
            MAILER_TYPE = "smtp";
        };
        time = {
            DEFAULT_UI_LOCATION = "Europe/Berlin"
        };

        session.COOKIE_SECURE = true;
        service.DISABLE_REGISTRATION = true;
    };

}