This repository has been archived on 2024-11-01. You can view files and clone it, but cannot push or open issues or pull requests.
services/_ansible/roles/gitea/vars/main.yml

93 lines
3 KiB
YAML

svc:
domain: "git.serguzim.me"
name: gitea
port: 3000
caddy_extra: header /attachments/* Access-Control-Allow-Origin *
db:
host: "{{ postgres.host }}"
port: "{{ postgres.port }}"
ssh_port: 22
ssh_port_alt: 3022
svc_env:
GITEA__database__DB_TYPE: "postgres"
GITEA__database__HOST: "{{ svc.db.host }}:{{ svc.db.port }}"
GITEA__database__NAME: "gitea"
GITEA__database__USER: "{{ vault_gitea.db.user }}"
GITEA__database__PASSWD: "{{ vault_gitea.db.pass }}"
GITEA__database__SSL_MODE: "verify-full"
GITEA__repository__ENABLE_PUSH_CREATE_USER: "true"
GITEA__repository__ENABLE_PUSH_CREATE_ORG: "true"
GITEA__repository__DEFAULT_BRANCH: "main"
GITEA__cors__ENABLED: "true"
GITEA__cors__SCHEME: "https"
GITEA__ui__DEFAULT_THEME: "arc-green"
GITEA__server__DOMAIN: "{{ svc.domain }}"
GITEA__server__SSH_DOMAIN: "{{ svc.domain }}"
GITEA__server__SSH_PORT: "{{ svc.ssh_port }}"
GITEA__server__ROOT_URL: "https://{{ svc.domain }}"
GITEA__server__OFFLINE_MODE: "true"
GITEA__server__LFS_JWT_SECRET: "{{ vault_gitea.server_lfs_jwt_secret }}"
GITEA__server__LFS_START_SERVER: "true"
GITEA__security__INSTALL_LOCK: "true"
GITEA__security__INTERNAL_TOKEN: "{{ vault_gitea.security_internal_token }}"
GITEA__security__SECRET_KEY: "{{ vault_gitea.security_secret_key }}"
GITEA__openid__ENABLE_OPENID_SIGNUP: "true"
GITEA__openid__ENABLE_OPENID_SIGNIN: "false"
GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION: "true"
GITEA__service__ENABLE_BASIC_AUTHENTICATION: "false"
GITEA__service__NO_REPLY_ADDRESS: "discard.msrg.cc"
GITEA__webhook__DELIVER_TIMEOUT: "60"
GITEA__mailer__ENABLED: "true"
GITEA__mailer__PROTOCOL: "smtp+starttls"
GITEA__mailer__SMTP_ADDR: "mail.serguzim.me"
GITEA__mailer__SMTP_PORT: "587"
GITEA__mailer__FROM: "Gitea <git@serguzim.me>"
GITEA__mailer__USER: "git@serguzim.me"
GITEA__mailer__PASSWD: "{{ vault_gitea.mailer_passwd }}"
GITEA__mailer__SEND_AS_PLAIN_TEXT: "true"
GITEA__picture__DISABLE_GRAVATAR: "true"
GITEA__oauth2__JWT_SECRET: "{{ vault_gitea. oauth2_jwt_secret}}"
GITEA__metrics__ENABLED: "true"
GITEA__metrics__TOKEN: "{{ vault_gitea.metrics_token }}"
GITEA__storage__STORAGE_TYPE: "minio"
GITEA__storage__MINIO_ENDPOINT: "s3.serguzim.me"
GITEA__storage__MINIO_ACCESS_KEY_ID: "{{ vault_gitea.minio.access_key_id }}"
GITEA__storage__MINIO_SECRET_ACCESS_KEY: "{{ vault_gitea.minio.secret_access_key }}"
GITEA__storage__MINIO_BUCKET: "git"
GITEA__storage__MINIO_LOCATION: "de-contabo-1"
GITEA__storage__MINIO_USE_SSL: "true"
GITEA__OTHER__SHOW_FOOTER_BRANDING: "true"
GITEA__OTHER__SHOW_FOOTER_TEMPLATE_LOAD_TIME: "false"
compose:
watchtower: true
image: gitea/gitea:1.19
env: true
file:
services:
app:
volumes:
- data:/data
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
ports:
- "{{ svc.ssh_port }}:{{ svc.ssh_port }}"
- "{{ svc.ssh_port_alt }}:{{ svc.ssh_port }}"
volumes:
data: