{ config, ... }:

{
  users = {
    extraUsers.gitea = {
      isSystemUser = true;
      description = "Gitea Service";
      group = config.users.extraGroups.gitea.name;
    };
    extraGroups.gitea = { };
  };

  virtualisation.pods.gitea = {
    hostname = "gitea.tlater.net";
    publish = [ "3000:3000" "2221:2221" ];

    containers = {
      gitea = {
        image = "gitea/gitea:latest";
        volumes = [ "gitea:/data:Z" "/etc/localtime:/etc/localtime:ro" ];
        dependsOn = [ "postgres" ];

        environment = {
          DB_TYPE = "postgres";
          DB_HOST = "gitea-postgres:5432";
          DB_NAME = "gitea";
          DB_USER = "gitea";
          DB_PASSWD = "/qNDDK9WCMuubfA7D8DFwfl9T+Gy2IMDvPhiNpcxZjY=";

          USER_UID = toString config.users.extraUsers.gitea.uid;
          USER_GID = toString config.users.extraGroups.gitea.gid;

          RUN_MODE = "prod";
          DOMAIN = "gitea.tlater.net";
          SSH_PORT = "2221";
        };
      };

      postgres = {
        image = "postgres:alpine";
        environment = {
          POSTGRES_DB = "gitea";
          POSTGRES_USER = "gitea";
          POSTGRES_PASSWORD = "/qNDDK9WCMuubfA7D8DFwfl9T+Gy2IMDvPhiNpcxZjY=";
        };
        volumes = [ "gitea-db-data:/var/lib/postgresql/data" ];
      };
    };
  };
}