feat(gitea): refactor configuration to use structured app_config and add TLS support

2025-05-09 22:21:33 +02:00
parent 9de7d52192
commit 17a54f6792
13 changed files with 487 additions and 206 deletions
@@ -0,0 +1,92 @@
+APP_NAME  = ${APP_NAME}
+RUN_MODE  = ${RUN_MODE}
+WORK_PATH = /data/gitea
+
+[repository]
+ROOT = /data/git/repositories
+
+[repository.local]
+LOCAL_COPY_PATH = /data/gitea/tmp/local-repo
+
+[repository.upload]
+TEMP_PATH = /data/gitea/uploads
+
+[server]
+APP_DATA_PATH    = /data/gitea
+SSH_DOMAIN       = ${DOMAIN}
+HTTP_PORT        = ${HTTP_PORT}
+%{ if TLS_ENABLED ~}
+PROTOCOL        = https
+ROOT_URL        = https://${DOMAIN}
+CERT_FILE      = /etc/ssl/certs/private/tls.crt
+KEY_FILE       = /etc/ssl/certs/private/tls.key
+%{ else ~}
+PROTOCOL        = http
+ROOT_URL         = http://${DOMAIN}
+%{ endif ~}
+DISABLE_SSH      = ${DISABLE_SSH}
+SSH_PORT         = ${SSH_PORT}
+SSH_LISTEN_PORT  = ${SSH_PORT}
+LFS_START_SERVER = true
+LFS_CONTENT_PATH = /data/git/lfs
+LFS_JWT_SECRET   = ${LFS_JWT_SECRET}
+DOMAIN           = ${DOMAIN}
+OFFLINE_MODE     = false
+
+[database]
+PATH     = /data/gitea/gitea.db
+DB_TYPE  = mysql
+HOST     = ${DB_HOST}:${DB_PORT}
+NAME     = ${DB_NAME}
+USER     = ${DB_USER}
+PASSWD   = ${DB_PASSWD}
+SSL_MODE = ${DB_SSL_MODE}
+
+[indexer]
+ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve
+
+[session]
+PROVIDER_CONFIG = /data/gitea/sessions
+
+[picture]
+AVATAR_UPLOAD_PATH            = /data/gitea/avatars
+REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
+
+[attachment]
+PATH = /data/gitea/attachments
+
+[log]
+ROOT_PATH = /data/gitea/log
+
+[security]
+INSTALL_LOCK   = true
+SECRET_KEY     = ${SECRET_KEY}
+INTERNAL_TOKEN = ${INTERNAL_TOKEN}
+
+[service]
+DISABLE_REGISTRATION              = ${DISABLE_REGISTRATION}
+REQUIRE_SIGNIN_VIEW               = ${REQUIRE_SIGNIN_VIEW}
+REGISTER_EMAIL_CONFIRM            = ${REGISTER_EMAIL_CONFIRM}
+ENABLE_NOTIFY_MAIL                = ${ENABLE_NOTIFY_MAIL}
+ALLOW_ONLY_EXTERNAL_REGISTRATION  = ${ALLOW_ONLY_EXTERNAL_REGISTRATION}
+ENABLE_CAPTCHA                    = ${ENABLE_CAPTCHA}
+DEFAULT_KEEP_EMAIL_PRIVATE        = true
+DEFAULT_ALLOW_CREATE_ORGANIZATION = true
+DEFAULT_ENABLE_TIMETRACKING       = true
+NO_REPLY_ADDRESS                  = ${NO_REPLY_ADDRESS}
+
+[oauth2]
+JWT_SECRET = ${JWT_SECRET}
+
+[mailer]
+ENABLED   = true
+FROM      = ${MAIL_FROM}
+USER      = ${SMTP_USER}
+PASSWD    = ${SMTP_PASSWD}
+PROTOCOL  = ${SMTP_PROTOCOL}
+SMTP_ADDR = ${SMTP_HOST}
+SMTP_PORT = ${SMTP_PORT}
+
+[openid]
+ENABLE_OPENID_SIGNIN = true
+ENABLE_OPENID_SIGNUP = false