{config, ...}: {
  services.forgejo = {
    enable = true;
    settings = {
      server = with config.constants; {
        DOMAIN = domain;
        HTTP_ADDR = wildcard;
        HTTP_PORT = port.forgejo;
        ROOT_URL = "https://forgejo.${domain}";
      };
      service.DISABLE_REGISTRATION = true;
      session.COOKIE_SECURE = true;
    };
  };
}