Setup forgejo on astral

hosts/astral/default.nix

@@ -1,10 +1,12 @@
-{ modulesPath, nixosModules, agenix, lib, pkgs, config, ... }: {
+{ modulesPath, nixosModules, agenix, lib, pkgs, ... }: {
   imports = [
     "${modulesPath}/virtualisation/amazon-image.nix"
     nixosModules.nano
     nixosModules.nettika
     nixosModules.promptmoji
     agenix.nixosModules.default
+    ./forgejo.nix
+    ./vaultwarden.nix
   ];
 
   boot.loader.grub.device = lib.mkForce "/dev/nvme0n1";
@@ -26,8 +28,6 @@
     firewall.allowedTCPPorts = [ 80 443 ];
   };
 
-  age.secrets.vaultwarden-env.file = ./secrets/vaultwarden-env.age;
-
   users.defaultUserShell = pkgs.fish;
 
   security.sudo.wheelNeedsPassword = false;
@@ -39,27 +39,10 @@
         respond "astral is online"
         header Strict-Transport-Security: "max-age=63072000; includeSubDomains"
       '';
-      "vault.leaf.ninja".extraConfig = ''
-        reverse_proxy localhost:8222
-      '';
     };
   };
 
-  services.vaultwarden = {
-    enable = true;
-    config = {
-      domain = "https://vault.leaf.ninja";
-      signupsAllowed = false;
-      rocketAddress = "0.0.0.0";
-      rocketPort = 8222;
-      smtpHost = "smtp.migadu.com";
-      smtpFrom = "vaultwarden@leaf.ninja";
-      smtpPort = 587;
-      smtpSecurity = "starttls";
-      smtpUsername = "vaultwarden@leaf.ninja";
-    };
-    environmentFile = config.age.secrets.vaultwarden-env.path;
-  };
+  services.postgresql.enable = true;
 
   programs.fish.enable = true;