Scope

As part of #4161 - Move off Trac - Execution - Forgejo, we've recently provisioned a new NixOS server named webforge using OpenToFu (see #21), but its configuration is not defined anywhere else than on the server itself.

We should define a basic working configuration first w/o any specific services and make it configuration reproducible by pinning all the dependencies.

Value

• SysAdmin would be able to redeploy the exact same configuration if needed
• Contributors would be able to read the current configuration and propose changes (e.g.: implement specific services like Forgejo)

Requirements

A SysAdmin should be able to deploy the new configuration on the existing webforge server which should only update the current software while keeping the current authorized ssh keys, the hardware and network configuration intact.

Additional information

Initially covered by #28.