Reorganize services/ into category subfolders

Group service modules by category (media, network, vpn, identity,
dev, desktop) to make the growing services/ dir easier to navigate.
containers.nix stays at the top level since it's a shared backend,
not a single-category service.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

services/dev/gitea.nix

@@ -0,0 +1,40 @@
+{ ... }:
+
+# Gitea — self-hosted git. stateDir/repositories were migrated from the old
+# ZimaOS docker instance straight into stateDir's default layout, so no
+# import step is needed — just chown it to the gitea user after first deploy
+# (currently darman:users from the CIFS copy):
+#   chown -R gitea:gitea /mnt/data/AppData/gitea
+#
+# HTTP is reverse-proxied through Caddy (hosts/jupiter/configuration.nix).
+# SSH uses gitea's own built-in server on :2222 (not the host's :22, and not
+# :222 — the unpriv gitea user can't bind <1024).
+{
+  services.gitea = {
+    enable = true;
+    stateDir = "/mnt/data/AppData/gitea";
+    lfs.enable = true;
+
+    settings = {
+      repository = {
+        DEFAULT_BRANCH = "master";
+      };
+      server = {
+        DOMAIN = "git.mgaction.town";
+        SSH_DOMAIN = "git.mgaction.town";
+        ROOT_URL = "http://git.mgaction.town/";
+        HTTP_PORT = 3000;
+        START_SSH_SERVER = true;
+        SSH_PORT = 2222;
+        SSH_LISTEN_PORT = 2222;
+      };
+      service = {
+        DISABLE_REGISTRATION = true;
+      };
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ 2222 ];
+
+  users.users.gitea.extraGroups = [ "users" ];
+}