{ outputs, ... }:
{
  imports = [
    # TODO: auto-import via `outputs.modules.nixos`
    outputs.modules.global.nix-config
    outputs.modules.nixos.gogs
  ];

  services.gogs = {
    enable = true;

    theme = "dark-blue";
    adminUser = {
      name = "control";
      email = "such_shifter280@pilina.email";
      passwordFile = "/run/secrets/gogs-admin";
    };

    settings = {
      auth.DISABLE_REGISTRATION = true;

      server = {
        DOMAIN = "git.t5.st";
        EXTERNAL_URL = "https://git.t5.st/";
        HTTP_PORT = 3000;
        SSH_PORT = 2222;
        START_SSH_SERVER = true;
      };

      service.SHOW_REGISTRATION_BUTTON = false;
    };
  };

  networking = {
    firewall.allowedTCPPorts = [ 3000 2222 ];
    interfaces.eth0 = {
      ipv4.addresses = [{
        address = "192.168.1.3";
        prefixLength = 24;
      }];
    };
    defaultGateway = "192.168.1.1";
    nameservers = [ "8.8.8.8" ];
    useDHCP = false;
  };

  boot.isContainer = true;
  system.stateVersion = "26.05";
}