{
  services.forgejo = {
    enable = true;
    settings = {
      server = { ROOT_URL = "https://git.stuce.ch"; };
      openid = {
        ENABLE_OPENID_SIGNIN = false;
        ENABLE_OPENID_SIGNUP = true;
        WHITELISTED_URIS = "auth.stuce.ch";
      };
      service = {
        DISABLE_REGISTRATION = false;
        ALLOW_ONLY_EXTERNAL_REGISTRATION = true;
        SHOW_REGISTRATION_BUTTON = false;
      };
      session = { COOKIE_SECURE = true; };

    };
  };
}