From 5f9ef795c0433788883267500bce66b50da323de Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jana=20D=C3=B6nszelmann?= <jana@donsz.nl>
Date: Sat, 3 Jan 2026 11:31:11 +0100
Subject: [PATCH] disallow local login on forge

---
 fili/services/forgejo.nix | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/fili/services/forgejo.nix b/fili/services/forgejo.nix
index de08a91..d648d8d 100644
--- a/fili/services/forgejo.nix
+++ b/fili/services/forgejo.nix
@@ -38,7 +38,12 @@ in
     extraConfig = ''
       client_max_body_size 512M;
     '';
-    locations."/".proxyPass = "http://[::1]:13121";
+    locations."/" = {
+      proxyPass = "http://[::1]:13121";
+      extraConfig = ''
+        rewrite ^/user/login.*$ /user/oauth2/pocketid last;
+      '';
+    };
   };
 
   services.forgejo = {
@@ -86,6 +91,7 @@ in
       };
       repository = {
         DEFAULT_PRIVATE = "private";
+        DISABLE_HTTP_GIT = true;
       };
       mailer = {
         ENABLED = true;