nrec-nixos01: enable Git LFS and hide explore page

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

hosts/nrec-nixos01/configuration.nix

@@ -29,8 +29,9 @@
   homelab.host.labels.ansible = "false";
 
   fileSystems."/" = {
-    device = lib.mkDefault "/dev/vda1";
-    fsType = lib.mkDefault "ext4";
+    device = "/dev/disk/by-label/nixos";
+    fsType = "ext4";
+    autoResize = true;
   };
 
   boot.loader.grub.enable = true;
@@ -52,6 +53,7 @@
   networking.firewall.allowedTCPPorts = [
     22
     80
+    443
   ];
 
   nix.settings.substituters = [
@@ -63,9 +65,9 @@
 
   services.caddy = {
     enable = true;
-    virtualHosts.":80" = {
+    virtualHosts."nrec-nixos01.t-juice.club" = {
       extraConfig = ''
-        respond "Hello from nrec-nixos01"
+        reverse_proxy 127.0.0.1:3000
       '';
     };
   };

hosts/nrec-nixos01/default.nix

@@ -1,7 +1,9 @@
-{ ... }:
+{ modulesPath, ... }:
 {
   imports = [
     ./configuration.nix
     ../../system/packages.nix
+    ../../services/forgejo
+    (modulesPath + "/profiles/qemu-guest.nix")
   ];
 }

services/forgejo/default.nix

@@ -0,0 +1,19 @@
+{ ... }:
+{
+  services.forgejo = {
+    enable = true;
+    database.type = "sqlite3";
+    settings = {
+      server = {
+        DOMAIN = "nrec-nixos01.t-juice.club";
+        ROOT_URL = "https://nrec-nixos01.t-juice.club/";
+        HTTP_ADDR = "127.0.0.1";
+        HTTP_PORT = 3000;
+      };
+      server.LFS_START_SERVER = true;
+      service.DISABLE_REGISTRATION = true;
+      "service.explore".REQUIRE_SIGNIN_VIEW = true;
+      session.COOKIE_SECURE = true;
+    };
+  };
+}