{ ... }: {

  services.gitea = {
    enable = true;

    database = {
      user = "gitea";
      name = "gitea";
      type = "postgres";
      socket = "/run/postgresql/";
      password = "8/xdr6EkKvMyGLhBz5atFN1GFntN8GdjVbVZUadcoyE"; #TODO change to passwordFile (and change password)
    };
    stateDir = "/var/lib/gitea/data/";
    settings = {
      "server" = {
        ALLOW_DOWAIN = "https://git.bernard.com.de";
        HTTP_PORT = 2301; #TODO Make these midori config settings
        #TODO change to unix socket
      };
    };
  };

  services.httpd.virtualHosts."gitea" = {
    hostName = "git.bernard.com.de";

    forceSSL = true;

    sslServerCert = "/var/lib/certs/bernard.com.de/fullchain.pem";
    sslServerKey = "/var/lib/certs/bernard.com.de/privkey.pem";
    sslServerChain = "/var/lib/certs/bernard.com.de/fullchain.pem";

    locations."/" = {
      proxyPass = "http://localhost:2301/";

    };
  };

  environment.persistence."/persistence".directories = [
    "/var/lib/gitea/data/"
  ];

}