feat(nix): Configure Gogs setup

2 files changed, 23 insertions, 3 deletions

diff --git a/dns/root-tazj-in b/dns/root-tazj-in
index a6d0ced0fd..5f0b40347c 100644
--- a/dns/root-tazj-in
+++ b/dns/root-tazj-in
@@ -3,7 +3,7 @@ tazj.in. 21600 IN NS ns-cloud-a1.googledomains.com.
 tazj.in. 21600 IN NS ns-cloud-a2.googledomains.com.
 tazj.in. 21600 IN NS ns-cloud-a3.googledomains.com.
 tazj.in. 21600 IN NS ns-cloud-a4.googledomains.com.
-tazj.in. 21600 IN SOA ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 104 21600 3600 1209600 300
+tazj.in. 21600 IN SOA ns-cloud-a1.googledomains.com. cloud-dns-hostmaster.google.com. 106 21600 3600 1209600 300
 
 ;; Email setup
 tazj.in. 300 IN MX 10 mx.runbox.com.
@@ -18,8 +18,9 @@ www.tazj.in. 3600 IN TXT "keybase-site-verification=ER8m_byyqAhzeIy9TyzkAU1H2p2y
 ;; Webpage records setup
 tazj.in. 60 IN A 46.21.106.241
 www.tazj.in. 60 IN A 46.21.106.241
+git.tazj.in. 60 IN A 46.21.106.241
+
 files.tazj.in. 300 IN CNAME c.storage.googleapis.com.
-git.tazj.in. 60 IN A 104.155.119.229
 ip.tazj.in. 300 IN A 104.155.119.229
 
 ;; GleSYS machines
diff --git a/nix/tazserve.nix b/nix/tazserve.nix
index 53a94f6684..97e6313587 100644
--- a/nix/tazserve.nix
+++ b/nix/tazserve.nix
@@ -9,7 +9,7 @@ tazblog = import ./tazblog { inherit blogSource; };
 blog = tazblog.tazblog;
 blogConfig = {
   enableACME = true;
-  addSSL = true;
+  forceSSL = true;
   locations."/" = {
     proxyPass = "http://127.0.0.1:8000";
   };
@@ -38,13 +38,32 @@ in {
     wantedBy              = [ "multi-user.target" ];
   };
 
+  # Set up Gogs
+  services.gogs = {
+    enable       = true;
+    appName      = "Gogs: tazjin's private code";
+    cookieSecure = true;
+    domain       = "git.tazj.in";
+    rootUrl      = "https://git.tazj.in/";
+  };
+
   # Set up reverse proxy
   services.nginx = {
     enable = true;
     recommendedTlsSettings = true;
     recommendedProxySettings = true;
 
+    # Blog!
     virtualHosts."tazj.in" = blogConfig;
     virtualHosts."www.tazj.in" = blogConfig;
+
+    # Git!
+    virtualHosts."git.tazj.in" = {
+      enableACME = true;
+      forceSSL   = true;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:3000";
+      };
+    };
   };
 }