disable gitea registration

hosts/hermes/configuration.nix

@@ -39,7 +39,7 @@
   };
 
   environment.systemPackages = with pkgs; [
-    inputs.agenix.packages."${system}".default
+    inputs.agenix.packages."${stdenv.hostPlatform.system}".default
     neovim
     wget
     curl
@@ -54,7 +54,6 @@
   ];
 
   networking.firewall.enable = false;
-  networking.firewall.allowedTCPPorts = [8222];
 
   networking.nftables.enable = true;
 

modules/services/gitea.nix

@@ -15,6 +15,9 @@
         DOMAIN = "git.nicknase27.com";
         ROOT_URL = "https://git.nicknase27.com";
       };
+      service = {
+        DISABLE_REGISTRATION = true;
+      };
     };
   };
 

modules/services/vaultwarden.nix

@@ -17,6 +17,7 @@
     };
     environmentFile = ["/run/secrets/vaultwarden.env"];
   };
+  networking.firewall.allowedTCPPorts = [8222];
   age.secrets.vaultwarden = {
     file = ../../secrets/vaultwarden.age;
     path = "/run/secrets/vaultwarden.env";