{ ...
}:

{
  networking.firewall.allowedTCPPorts = [ 22 ];
  
  services.traefik.dynamicConfigOptions.http = {
    routers.forgejo = {
      rule = "Host(`git.dokkae.com`)";
      service = "forgejo";
      entryPoints = [ "websecure" ];
      tls = { certResolver = "letsencrypt"; };
    };

    services.forgejo = {
      loadBalancer.servers = [
        { url = "http://localhost:3000"; }
      ];
    };
  };

}