avoids fighting an operator-side `services.forgejo` over the singleton module options. container shares host netns (`privateNetwork = false`) so agents still dial the forge via plain `localhost:<httpPort>` and the host firewall is the only layer that matters. container name is `hive-forge` (no `h-` prefix) so hive-c0re's lifecycle scanner ignores it — operator manages it with the standard `nixos-container` CLI. state lives at `/var/lib/nixos-containers/hive-forge/var/lib/forgejo/` and survives restarts. |
||
|---|---|---|
| .. | ||
| modules | ||
| templates | ||