fix(nixos): allow Gitea source migration

configs/nixos/modules/services/gitea.nix

@@ -57,6 +57,7 @@ in
             SSH_LISTEN_PORT = 2222;
             REVERSE_PROXY_TRUSTED_PROXIES = "${cfg.reverseProxyAddress}/32";
           };
+          migrations.ALLOWED_HOST_LIST = "10.23.20.45/32:3000";
           service.DISABLE_REGISTRATION = true;
           # Direct bootstrap access uses HTTP until the public HTTPS route moves.
           session.COOKIE_SECURE = false;