Add cgit config

hosts/kamoshi/configuration.nix

@@ -4,6 +4,7 @@
     [
       /etc/nixos/hardware-configuration.nix
       ./profiles/freshrss.nix
+      ./profiles/cgit.nix
     ];
 
   # Use the GRUB 2 boot loader.

hosts/kamoshi/profiles/cgit.nix

@@ -0,0 +1,30 @@
+{ config, pkgs, ... }:
+let
+  home = "/var/lib/git";
+  address = "git.kamoshi.org";
+in
+{
+  users.users.git = {
+    isSystemUser = true;
+    description = "git user";
+    home = home;
+    shell = "${pkgs.git}/bin/git-shell";
+    openssh.authorizedKeys.keyFiles = [
+      /root/secrets/ssh/kamov.pub
+    ];
+  };
+  services = {
+    nginx = {
+      enable = true;
+      virtualHosts."${address}" = {
+        forceSSL = true;
+        enableACME = true;
+      };
+    };
+    cgit."${address}" = {
+      enable = true;
+      scanPath = home;
+      nginx.virtualHost = address;
+    };
+  };
+}