{ ... }:
{
  users.groups.git = {};
  users.users.git = {
    isSystemUser = true;
    group = "git";
    hashedPassword = "$6$Rc//lmBr5orYHn.0$M9y3Zj4zCe723r8hYGIhPC5kPv5SVGHjF1FsjrT9IIx7trxuNTLtLDQVL9lhmR5/7bFMUFEf0CMx9w7.vgXgY0";
    openssh.authorizedKeys.keyFiles = [
      ../files/id_tarrel.pub
      ../files/id_work.pub
    ];
  };

  services.gitea = {
    enable = true;
    appName = "JAP56 Git Server";
    group = "git";
    user = "git";
    settings.server = {
      HTTP_PORT = 80;
      DOMAIN = "snorlax";
    };
    useWizard = true;
  };

  services.openssh.settings.AllowUsers = [ "git" ];
}