feat(*): initialize new Snix infrastructure

Co-Authored-By: edef <edef@edef.eu>
Co-Authored-by: Ryan Lahfa <raito@lix.systems>
Change-Id: Ica1cda177a236814de900f50a8a61d288f58f519

ops/modules/www/git.snix.dev.nix

@@ -0,0 +1,26 @@
+{ ... }:
+
+{
+  imports = [
+    ./base.nix
+  ];
+
+  config = {
+    services.nginx.virtualHosts.forgejo = {
+      serverName = "git.snix.dev";
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:3000";
+        extraConfig = ''
+          proxy_ssl_server_name on;
+          proxy_pass_header Authorization;
+
+          # This has to be sufficiently large for uploading layers of
+          # non-broken docker images.
+          client_max_body_size 1G;
+        '';
+      };
+    };
+  };
+}