alexandre.pires
aee57a8b89
- Updated SSH configuration for Gitea to disable banner and TTY, and modified the AuthorizedKeysCommand. - Simplified gitea-shell script to directly call the k8s_gitea_shell command with required parameters. - Removed unused gitea-auth script from playbook_gitea.yml. - Updated systools_version in playbook_systools.yml to 0.4.5. - Enhanced ssh_locker_helper to copy redirect URL to clipboard based on OS. - Added a new script test_imaps for IMAP testing. - Updated Terraform configurations for various applications, including: - Added a backup script for MariaDB with retention policy. - Changed Gitea version to 1.24-rootless and adjusted SSH settings. - Updated Nginx configurations to log errors and access to stderr/stdout. - Refactored services to use ClusterIP type and adjusted security contexts for deployments. - Added temporary storage for applications using empty_dir. - Enhanced backup.sh scripts for better error handling and logging.
99 lines
2.3 KiB
Smarty
99 lines
2.3 KiB
Smarty
APP_NAME = ${APP_NAME}
|
|
RUN_MODE = ${RUN_MODE}
|
|
WORK_PATH = /data/gitea
|
|
|
|
[repository]
|
|
ROOT = /data/git/repositories
|
|
|
|
[repository.local]
|
|
LOCAL_COPY_PATH = /data/gitea/tmp/local-repo
|
|
|
|
[repository.upload]
|
|
TEMP_PATH = /data/gitea/uploads
|
|
|
|
[server]
|
|
APP_DATA_PATH = /data/gitea
|
|
SSH_DOMAIN = ${DOMAIN}
|
|
HTTP_PORT = ${HTTP_PORT}
|
|
%{ if TLS_ENABLED ~}
|
|
PROTOCOL = https
|
|
ROOT_URL = https://${DOMAIN}
|
|
CERT_FILE = /etc/ssl/certs/private/tls.crt
|
|
KEY_FILE = /etc/ssl/certs/private/tls.key
|
|
%{ else ~}
|
|
PROTOCOL = http
|
|
ROOT_URL = http://${DOMAIN}
|
|
%{ endif ~}
|
|
DISABLE_SSH = ${DISABLE_SSH}
|
|
START_SSH_SERVER = true
|
|
SSH_PORT = ${SSH_PORT}
|
|
SSH_LISTEN_PORT = ${SSH_PORT}
|
|
SSH_ROOT_PATH = /data/git/.ssh
|
|
SSH_AUTHORIZED_KEYS_BACKUP = true
|
|
LFS_START_SERVER = true
|
|
LFS_JWT_SECRET = ${LFS_JWT_SECRET}
|
|
DOMAIN = ${DOMAIN}
|
|
OFFLINE_MODE = false
|
|
SHELL = /bin/sh
|
|
|
|
[lfs]
|
|
PATH = /data/git/lfs
|
|
|
|
[database]
|
|
PATH = /data/gitea/gitea.db
|
|
DB_TYPE = mysql
|
|
HOST = ${DB_HOST}:${DB_PORT}
|
|
NAME = ${DB_NAME}
|
|
USER = ${DB_USER}
|
|
PASSWD = ${DB_PASSWD}
|
|
SSL_MODE = ${DB_SSL_MODE}
|
|
|
|
[indexer]
|
|
ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve
|
|
|
|
[session]
|
|
PROVIDER_CONFIG = /data/gitea/sessions
|
|
|
|
[picture]
|
|
AVATAR_UPLOAD_PATH = /data/gitea/avatars
|
|
REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
|
|
|
|
[attachment]
|
|
PATH = /data/gitea/attachments
|
|
|
|
[log]
|
|
ROOT_PATH = /data/gitea/log
|
|
|
|
[security]
|
|
INSTALL_LOCK = true
|
|
SECRET_KEY = ${SECRET_KEY}
|
|
INTERNAL_TOKEN = ${INTERNAL_TOKEN}
|
|
|
|
[service]
|
|
DISABLE_REGISTRATION = ${DISABLE_REGISTRATION}
|
|
REQUIRE_SIGNIN_VIEW = ${REQUIRE_SIGNIN_VIEW}
|
|
REGISTER_EMAIL_CONFIRM = ${REGISTER_EMAIL_CONFIRM}
|
|
ENABLE_NOTIFY_MAIL = ${ENABLE_NOTIFY_MAIL}
|
|
ALLOW_ONLY_EXTERNAL_REGISTRATION = ${ALLOW_ONLY_EXTERNAL_REGISTRATION}
|
|
ENABLE_CAPTCHA = ${ENABLE_CAPTCHA}
|
|
DEFAULT_KEEP_EMAIL_PRIVATE = true
|
|
DEFAULT_ALLOW_CREATE_ORGANIZATION = true
|
|
DEFAULT_ENABLE_TIMETRACKING = true
|
|
NO_REPLY_ADDRESS = ${NO_REPLY_ADDRESS}
|
|
|
|
[oauth2]
|
|
JWT_SECRET = ${JWT_SECRET}
|
|
|
|
[mailer]
|
|
ENABLED = true
|
|
FROM = ${MAIL_FROM}
|
|
USER = ${SMTP_USER}
|
|
PASSWD = ${SMTP_PASSWD}
|
|
PROTOCOL = ${SMTP_PROTOCOL}
|
|
SMTP_ADDR = ${SMTP_HOST}
|
|
SMTP_PORT = ${SMTP_PORT}
|
|
|
|
[openid]
|
|
ENABLE_OPENID_SIGNIN = true
|
|
ENABLE_OPENID_SIGNUP = false
|