{ config, pkgs, ... }:

{
    services.nginx.virtualHosts."git.stubbe.rocks" = {
        enableACME = true;
        forceSSL = true;
        locations."/".proxyPass = "http://unix:/run/gitlab/gitlab-workhorse.socket";
#	 locations."/".proxyPass = "http://localhost:3000";
    };

    services.gitlab = {
        enable = true;
        host = "git.stubbe.rocks";
        https = true;
	      port = 443;
        initialRootEmail = "gitlab@stubbe.rocks";
        initialRootPassword = "gtlb@stbbe.rcks";
        smtp = {
            enable = true;
            address = "localhost";
            port = 25;
        };
        databasePassword = "arqN1MgbxS9sBJIcpSmErDnHHM4Q2dOi4C9zKgK6ifHRucN2RlUpUc6jrFWbnX1hNsT9sOGCSINyUJEyijpJC64mOOXHYtWWjGQ2Dv6QvXbUrnRDcSLPy5fs9410pZAp";
        secrets.secret ="7Q7Xij4VsXc1FIwSZuSi6uf6Z4yD4dFsIsS0zjoaJxySOgfZinA9lKrM6IUDNnzbd9KrfvGpKEs1BwdrAAMJMIUu8NNU5dtLPG1tqBiYBTchq6nysei8QmZlAAQ1DmAN";
        secrets.otp ="ztAJGIGo0DNX76OVG409BOe0VxHtX3ikLMTTJuW83L631XwGCeSjoGd3HLdSoTGDVVHA6p90ielXJy1lZU11VkHrT0RION0bCvOFaumStqLLMIGwOZkgaWlFoNSp5ZnO";
        secrets.db ="3A7MLInxsf1vgNYXXfujFtYvltq4QW9FMuPJumlDhhWTwQJ8SZehFtXwA8tHwBjM4VDDzmFSFPBBgeZjKKFDFqqQjjN9Uq9kGOTlpN1qDOoxbyujLhXNbcaoU64tTRSO";
        secrets.jws = ''
            -----BEGIN RSA PRIVATE KEY-----
            MIIEowIBAAKCAQEA4ouOJ6l0CjgavLWffRHOlw0GuBBGE+OM/EyviXHVitYo0zvx
            UF3vfu2eqiVHs2YzZ/5LUi9k2YCsljrU+6fi2QmbeqZc0JYa05Ev1EGp0i6MtQbI
            udqkZW7WpuFfpIFWVxPNfyTeJDTKsd0ZOS+pIVCv6AwbW/2pRF1L7MfX5xA8JDup
            Hy/OQDv9ZoSIYEthMYkh6ap7gjAdlsNR7UfMEv/I4uHV1oYchKCa0mkCkFT7WbOa
            tivrvUqqjURUBJqcmArhJRJGbIoGROsT2kXsaygjvqSE2AuStAfnZzuPhx5+PZmh
            x0iaBoecfk4ZDUmHD9tOZ5kwcwCodrRBYBmEZQIDAQABAoIBAEJ2hOcX7MZOvXFd
            q4PK5JwmIzF+/MA7AxLGAL3HGsoXmHSYYmycknXfiqwKMeXs9unsjfZ3lxPEj12n
            tvJ5x7C7A9VQ12wOjaJCNxEDjqnuJDO74Mm93nsvsGPXPPMLSuRTF/fUPiPLJShX
            YF4JoIn4nRLr8l7jpXQ8FtlJrArKh/xYCqYphbrO5vNWqrfV9kJnYRio/e8xhDTY
            sf/uV8w8y+RFuXBAmYiNFtFLA6d2nk2sJWv5uC9rfFS1CDOZRzBCsweflEimxYBV
            i6kDnyZq9I2ZNGBR3spl+MeFMe5y6d5ZeoWC7XYwkVHCWB8iE1iM2XkuCHfNW3qf
            N1h928UCgYEA/5ESH55pFmDTVkq2GdOArpBkb5HXp008Ldson9B6PLp+AvZesA5u
            +q3ve/bodNyveNr09wskOyks/UTRGSYmbRoz5Mt5j7hVQky1EoL8ovmRoDHeW3ck
            WTg3o8pfuCaA1ldyhI/A+l0xWFQvdjsj9rk65b9W5i4sCYo3XnD8g+sCgYEA4u3j
            PG9zn4rhFi0G+m0zUpzqAzPAywRtrg9ym4XIuvhQdEBK/YuPx1m9QjB3BV36CLPW
            XV2GGLXVONuEugBz9kWB1b8jkq9RpJKDapy0dDkXuB82HHg9jhTC+Ui19IqIRLOh
            7geyne3TskkKaaeoPYbIbqYAhUgKrKNa0JckFO8CgYA3mqW50WqF3u08Yib6uYTO
            9kWT7MRh9zD3vS46j055Ng5CsL3rSkilLADmFNOA0Z8wCVuxAHCSmqPaOwXPlfhY
            VpIh3o+FUJLkSPJAo9U51Fj15MO/XM3Ax7V7YoWu+FmhyQb2hpxzHKGm2TI2ZCmv
            /Z8t65KJpFQag0MGvkiCnwKBgQCywB3ZkhTqnDO3CxrPEkt2DKIMiayYflGC5Soq
            tVQrasO8/pPTaiaEKfz5cUGfmaoFRttZSf0B4+Ej206OUSMG3zNpUhlMRwsxbjNU
            PEGstvgnEXbHMDOUgmgegpbJHIJAU5r+61NYMWkqq3wnQ2gzpsKk3d/VHK1D1Z0I
            Z7WFQwKBgAyFcOy86iC4xTFvq/Xe2TZLQsKX94glsshnBUiR9P4UuJ4xHScTpceH
            Gw+Z2ZAqYiEKzyGom0Fbw6USD9GvnYfnidJvKZhxzSnl+dggEY6ZCtfB2nsO6K97
            9zRPdUnvMLMGiI3RNHO7+SJtee0sIgDAnaodremEU/59ZaXt9Dlw
            -----END RSA PRIVATE KEY-----
    '';

      extraConfig.gitlab= {
          default_theme = 2;
          };
    };
}