{ self, ... }:
let
  hosts = self.nixosConfigurations;
  domains.internal = "code.${hosts.ruan.config.networking.fqdn}";
  domains.external = "code.pvsr.dev";
in
{
  flake.modules.nixos.core.networking.hosts.${hosts.ruan.config.local.ip} = [ domains.external ];
  local.desktops.ruan.local.caddy.internalProxies.${domains.external} = "${domains.internal}";

  local.containers."code.ruan" =
    { config, pkgs, ... }:
    {
      environment.systemPackages = [ pkgs.forgejo ];
      environment.sessionVariables.FORGEJO_WORK_DIR = "/var/lib/forgejo";

      networking.firewall.allowedTCPPorts = [
        80
        2222
      ];

      local.testScript = ''
        machine.wait_for_unit("forgejo.service")
        machine.wait_for_open_port(80)
        machine.wait_for_open_port(2222)
      '';

      services.forgejo = {
        enable = true;
        package = pkgs.forgejo;
        settings = {
          server = {
            PROTOCOL = "http";
            HTTP_ADDR = "::";
            HTTP_PORT = 80;
            DOMAIN = "${domains.external}";
            ROOT_URL = "https://${domains.external}";
            START_SSH_SERVER = true;
            SSH_DOMAIN = "${domains.internal}";
            SSH_PORT = 2222;
            SSH_LISTEN_HOST = "::";
            SSH_LISTEN_PORT = 2222;
            BUILTIN_SSH_SERVER_USER = "git";
          };
          DEFAULT.APP_NAME = "${domains.external}";
          "ui.meta" = {
            AUTHOR = "${domains.external}";
            DESCRIPTION = "${domains.external}";
          };
          i18n = {
            LANGS = "en-US";
            NAMES = "English";
          };
          other = {
            SHOW_FOOTER_VERSION = false;
            SHOW_FOOTER_TEMPLATE_LOAD_TIME = false;
            SHOW_FOOTER_POWERED_BY = false;
          };
          repository = {
            PREFERRED_LICENSES = "MIT,GPL-3.0-or-later,AGPL-3.0-or-later";
            ENABLE_PUSH_CREATE_USER = true;
            DEFAULT_PUSH_CREATE_PRIVATE = false;
            DISABLED_REPO_UNITS = "repo.issues,repo.ext_issues,repo.pulls,repo.wiki,repo.ext_wiki,repo.projects,repo.packages,repo.actions";
            DISABLE_STARS = true;
            DISABLE_DOWNLOAD_SOURCE_ARCHIVES = true;
          };
          "repository.upload".ENABLED = false;
          service = {
            DISABLE_REGISTRATION = true;
          };
          openid.ENABLE_OPENID_SIGNIN = false;
          oauth2.ENABLED = false;
          security = {
            INSTALL_LOCK = true;
            LOGIN_REMEMBER_DAYS = 365;
          };
          api.ENABLE_SWAGGER = false;
          cache = {
            ADAPTER = "twoqueue";
            HOST = ''{"size":100, "recent_ratio":0.25, "ghost_ratio":0.5}'';
          };
        };
      };
    };
}