{
  config,
  lib,
  pkgs,
  ...
}:
let
  virtualHost = "${config.networking.hostName}.aristote.mesh";
in
{
  services.cgit.default = {
    enable = true;
    scanPath = "/srv/git";
    gitHttpBackend.enable = false;
    nginx = {
      inherit virtualHost;
      location = "/git/";
    };
    settings = {
      head-include = "${./head.html}";
      root-title = "repositories";
      root-desc = "by Quentin Aristote";
      source-filter = "${pkgs.cgit}/lib/cgit/filters/syntax-highlighting.py";
      clone-prefix = "https://git.aristote.fr";
      section-from-path = 1;
    };
  };
  services.nginx.virtualHosts."${virtualHost}".locations."= /git/cgit.css".alias =
    lib.mkForce ./cgit.css;

  # give access to the repos
  users.users.cgit.extraGroups = [ "git" ];
}