feat(thinkcentre): add forgejo

machines/thinkcentre/configuration.nix

@@ -13,7 +13,7 @@
   networking.firewall = {
     enable = true;
     interfaces."wg0" = {
-      allowedTCPPorts = [7654 3030];
+      allowedTCPPorts = [7654 3030 3000];
     };
   };
 
@@ -103,6 +103,29 @@
     };
   };
 
+  services.forgejo = {
+    enable = true;
+    settings.server = {
+      DOMAIN = "git.s.michaelt.xyz";
+      ROOT_URL = "https://git.s.michaelt.xyz";
+      DISABLE_SSH = true;
+      HTTP_PORT = 3000;
+    };
+    settings.session = {
+      COOKIE_SECURE = true;
+    };
+    settings.service = {
+      DISABLE_REGISTRATION = true;
+    };
+    settings.openid = {
+      ENABLE_OPENID_SIGNIN = true;
+      ENABLE_OPENID_SIGNUP = true;
+    };
+    settings.oauth2_client = {
+      ENABLE_AUTO_REGISTRATION = true;
+    };
+  };
+
   swapDevices = [
     {
       device = "/swapfile";