Refactor Gitea and SSH configurations, update backup scripts, and enhance Nginx settings

- Updated SSH configuration for Gitea to disable banner and TTY, and modified the AuthorizedKeysCommand.
- Simplified gitea-shell script to directly call the k8s_gitea_shell command with required parameters.
- Removed unused gitea-auth script from playbook_gitea.yml.
- Updated systools_version in playbook_systools.yml to 0.4.5.
- Enhanced ssh_locker_helper to copy redirect URL to clipboard based on OS.
- Added a new script test_imaps for IMAP testing.
- Updated Terraform configurations for various applications, including:
  - Added a backup script for MariaDB with retention policy.
  - Changed Gitea version to 1.24-rootless and adjusted SSH settings.
  - Updated Nginx configurations to log errors and access to stderr/stdout.
  - Refactored services to use ClusterIP type and adjusted security contexts for deployments.
  - Added temporary storage for applications using empty_dir.
  - Enhanced backup.sh scripts for better error handling and logging.

ansible/files/configs/sshd_config.d/gitea.conf

@@ -1,3 +1,5 @@
 Match User git
+  Banner none
+  PermitTTY no
   AuthorizedKeysCommandUser git
-  AuthorizedKeysCommand /usr/local/bin/k8s_gitea_auth -u %u -t %t -k %k
+  AuthorizedKeysCommand /usr/local/bin/k8s_gitea_auth -r gitea gitea-app -u %u -t %t -k %k

ansible/files/scripts/gitea-shell

@@ -1,4 +1,2 @@
 #!/bin/bash
-NAMESPACE=gitea
-PREFIX=gitea-app
-/usr/local/bin/k8s_gitea_shell "$NAMESPACE" "$PREFIX" "$@"
+exec /usr/local/bin/k8s_gitea_shell -r gitea gitea-app "$@"

ansible/playbook_gitea.yml

@@ -15,7 +15,6 @@
         mysql_group_id: 107
         gitea_sshd_config: "/etc/ssh/sshd_config.d/03-gitea.conf"
         gitea_scripts:
-          - "scripts/gitea-auth"
           - "scripts/gitea-shell"
       tags: always
 

ansible/playbook_systools.yml

@@ -7,7 +7,7 @@
   tasks:
     - name: Set required facts
       ansible.builtin.set_fact:
-        systools_version: "{{ systools_version | default('0.2.0') }}"
+        systools_version: "{{ systools_version | default('0.4.5') }}"
         ssh_locker_timeout: "{{ ssh_locker_timeout | default('5m') }}"
       tags: always