{ ... }:
let
  db_pass = import ../config/_passwords.nix;
in
{
  my-lxc.git = {
    container = {
      cores = 1;
      memory = 2048;
      disk = "10G";
      swap = 512;
    };
    db = {
      enable = true;
      password = db_pass.git;
    };
    system = {
      port = 3000;
      importConfig = [
        ../config/git-gitea.nix
      ];
      additional = {
        nix.extraOptions = ''
          extra-substituters = https://devenv.cachix.org https://nixpkgs-python.cachix.org
          extra-trusted-public-keys = devenv.cachix.org-1:w1cLUi8dv3hnoSPGAuibQv+f9TZLr6cv/Hm9XgU50cw= nixpkgs-python.cachix.org-1:hxjI7pFxTyuTHn2NkvWCrAUcNZLNS3ZAvfYNuYifcEU=
        '';
      };
    };
    logging = {
      enable = true;
      metricsEnable = true;
    };
    private = false; # available only on private lan
    auth = false; # auth overlay
  };
}