{
  pkgs,
  config,
  lib,
  ...
}: {
  services.gitea = {
    enable = true;
    database = {
      type = "sqlite3";
      passwordFile = "${config.age.secrets.gitea-db.path}";
    };
    settings = {
      server = {
        DOMAIN = "git.nicknase27.com";
        ROOT_URL = "https://git.nicknase27.com";
      };
      service = {
        DISABLE_REGISTRATION = true;
      };
    };
  };

  age.secrets.gitea-db = {
    file = ../../secrets/gitea-db.age;
    path = "/run/secrets/gitea-db";
    owner = "gitea";
    group = "gitea";
  };
}