forgejo migration

modules/default.nix

@@ -13,7 +13,7 @@ in
     ./nextcloud.nix
     ./prometheus.nix
     # ./mjolnir.nix
-    #    ./fail2ban.nix
+    ./fail2ban.nix
     ./email.nix
     # ./discord-matrix-bridge.nix
     ./mastodon.nix

modules/fail2ban.nix

@@ -15,7 +15,7 @@
     bantime-increment = {
       enable = true; # Enable increment of bantime after each violation
       multipliers = "1 2 4 8 16 32 64 128 256";
-      maxtime = "168h"; # Do not ban for more than 1 week
+      maxtime = "48h"; # Do not ban for more than 1 week
       overalljails = true; # Calculate the bantime based on all the violations
     };
   };

modules/gitea.nix

@@ -4,8 +4,18 @@ let
   inherit (config.serverConfig) ports vhosts;
 in
 {
-  services.gitea = {
+  services.forgejo = {
     enable = true;
+    package = pkgs.forgejo;
+
+    database = {
+      user = "gitea";
+      path = "${config.services.forgejo.stateDir}/data/gitea.db";
+      name = "gitea";
+    };
+
+    dump.enable = true;
+    
     settings = {
       service.DISABLE_REGISTRATION = true;
       server = {

specific/grimmauld-nixos-server/configuration.nix

@@ -9,6 +9,7 @@
   networking.hostName = "grimmauld-nixos-server";
   networking.domain = "grimmauld.de";
   services.openssh.enable = true;
+  services.opensnitch.enable = lib.mkForce false;
   system.stateVersion = "23.11";
   networking.networkmanager.enable = lib.mkForce false;
   boot.kernelPackages = pkgs.linuxPackages_latest;