flake/hosts/forgejo-ci/default.nix

{ config, pkgs, lib, inputs, ... }: with config.lyn.lib; {
  imports =
    [
      ./hardware-configuration.nix
      ./../../users/lyn
    ];
  lyn.sops.secrets."hosts/forgejo-ci/forgejo_ci_token" = {};
  lyn.kernel.latest.enable = true; 
  lyn.profiles.base.enable = true;
  lyn.profiles.vm.enable = true;
  lyn.services.forgejo-ci.enable = true;
  lyn.services.forgejo-ci.domain = "git.shibe.pro";
  lyn.services.forgejo-ci.instancename = "shibepro-ci";
  # Use UEFI
  boot.loader.systemd-boot.enable = true;

  networking.hostName = "forgejo-ci"; # Define your hostname.

  # Firewall stuff:
  networking.firewall.enable = true;
  networking.firewall.allowPing = true;
  system.stateVersion = "23.05"; 
}