webserver: Use a hardened systemd unit instead of a container

configuration/default.nix

@@ -37,7 +37,7 @@
     useDHCP = false;
     interfaces.eth0.useDHCP = true;
 
-    firewall.allowedTCPPorts = [80 443 2222 21025];
+    firewall.allowedTCPPorts = [80 443 2222 2221 21025];
   };
 
   time.timeZone = "Europe/London";
@@ -73,5 +73,7 @@
     acceptTerms = true;
   };
 
+  virtualisation.oci-containers.backend = "podman";
+
   system.stateVersion = "20.09";
 }

configuration/services/gitea.nix

@@ -9,7 +9,7 @@ in {
     database.type = "postgres";
 
     ssh.clonePort = 2222;
-    rootUrl = "https://${domain}/";
+    rootUrl = "https://gitea.tlater.net/";
     cookieSecure = true;
 
     appName = "Gitea: Git with a cup of tea";