From 7eb99ef49e2b06c4e14f444c7fcb2fc80ab65a39 Mon Sep 17 00:00:00 2001
From: Caroline Larimore <caroline@larimo.re>
Date: Tue, 3 Mar 2026 22:22:57 -0800
Subject: cgit: separate config

---
 modules/nixos/services/web/cgit/default.nix | 25 ++++++++++++++-----------
 1 file changed, 14 insertions(+), 11 deletions(-)

(limited to 'modules/nixos/services')

diff --git a/modules/nixos/services/web/cgit/default.nix b/modules/nixos/services/web/cgit/default.nix
index ddef7c8..c7cd56e 100644
--- a/modules/nixos/services/web/cgit/default.nix
+++ b/modules/nixos/services/web/cgit/default.nix
@@ -32,13 +32,12 @@ in {
   config = mkIf cfg.enable {
     cxl.services.web.enable = true;
 
-    services.cgit = {
-      "public" = {
-        enable = true;
+    services.cgit = let
+      base = {
         package = package;
 
-        scanPath = cfg.path;
         nginx.virtualHost = cfg.virtualHost;
+        scanPath = cfg.path;
 
         user = "git";
         group = "git";
@@ -69,17 +68,21 @@ in {
 
         gitHttpBackend.checkExportOkFiles = true;
       };
+    in {
+      "public" = base // {
+        enable = true;
+      };
 
-      "private" = {
+      "private" = base // {
         enable = true;
-        scanPath = cfg.path;
         nginx.virtualHost = "private.${cfg.virtualHost}";
 
-        user = "git";
-        group = "git";
-
-        settings = {
+        settings = base.settings // {
+          strict-export = "";
           enable-git-config = false;
+
+          root-title = "private.${cfg.virtualHost}";
+          root-desc = "caroline's (private) git mirror :3";
         };
 
         gitHttpBackend.enable = false;
@@ -94,7 +97,7 @@ in {
           enableACME = cfg.ssl;
         };
         "private.${cfg.virtualHost}" = {
-          addSSL = cfg.ssl;
+          forceSSL = cfg.ssl;
           enableACME = cfg.ssl;
 
           extraConfig = ''
-- 
cgit v1.2.3