config
This commit is contained in:
parent
03b683fd15
commit
20500a2776
1 changed files with 74 additions and 86 deletions
|
|
@ -15,32 +15,17 @@ lvm_groups:
|
|||
manage_lvm: true
|
||||
pvresize_to_max: true
|
||||
|
||||
### geerlingguy_postgres
|
||||
postgresql_user: postgres
|
||||
postgresql_group: postgres
|
||||
postgresql_databases:
|
||||
- name: forgejo
|
||||
postgresql_users:
|
||||
- name: forgejo
|
||||
password: supersecure # ändern
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### mgrote_apt_manage_packages
|
||||
apt_packages_extra:
|
||||
- fail2ban
|
||||
|
||||
### geerlingguy_postgres
|
||||
postgresql_databases:
|
||||
- name: "{{ gitea_db_name }}"
|
||||
postgresql_users:
|
||||
- name: "{{ gitea_db_user }}"
|
||||
password: "{{ gitea_db_password }}"
|
||||
|
||||
### oefenweb.ufw
|
||||
ufw_rules:
|
||||
- rule: allow
|
||||
|
|
@ -58,81 +43,84 @@ ufw_rules:
|
|||
protocol: tcp
|
||||
comment: 'gitea'
|
||||
from_ip: 0.0.0.0/0
|
||||
- rule: allow
|
||||
to_port: "{{ gitea_ssh_port }}"
|
||||
protocol: tcp
|
||||
comment: 'gitea'
|
||||
from_ip: 0.0.0.0/0
|
||||
|
||||
### l3d.gitea
|
||||
# config liegt in /etc/gitea/gitea.ini
|
||||
gitea_version: "1.21.7-0"
|
||||
gitea_fork: "forgejo"
|
||||
gitea_app_name: "Gitea"
|
||||
### pyratlabs-ansible-role-gitea
|
||||
# https://git.mgrote.net/ansible-roles-mirrors/pyratlabs-ansible-role-gitea
|
||||
# gitea update
|
||||
gitea_version: "1.21.7-0" # alt zum renovate testen
|
||||
gitea_version_check: true
|
||||
gitea_backup_on_upgrade: false
|
||||
# gitea in the linux world
|
||||
gitea_group: "gitea"
|
||||
gitea_user: "gitea"
|
||||
gitea_home: "/var/lib/gitea"
|
||||
gitea_repository_root: "{{ gitea_home }}"
|
||||
gitea_user_repo_limit: 300
|
||||
gitea_root_url: https://git.mgrote.net
|
||||
gitea_offline_mode: true
|
||||
gitea_lfs_server_enabled: false
|
||||
gitea_secret_key: "{{ lookup('keepass', 'gitea_secret_key', 'password') }}"
|
||||
gitea_internal_token: "{{ lookup('keepass', 'gitea_internal_token', 'password') }}"
|
||||
gitea_disable_git_hooks: false
|
||||
gitea_user_home: "{{ gitea_home }}"
|
||||
# config liegt in /etc/gitea/gitea.ini
|
||||
gitea_configuration_path: "/etc/gitea/etc/gitea"
|
||||
gitea_app_name: "forgejo"
|
||||
gitea_fqdn: "git.mgrote.net"
|
||||
# ssh
|
||||
gitea_ssh_port: 22 # assuming the host SSH server is running on port 22
|
||||
gitea_user: git # otherwise there will be permission issues
|
||||
gitea_start_ssh: false # to not start the built-in SSH server
|
||||
gitea_shell: "/bin/bash"
|
||||
# Repository
|
||||
gitea_default_branch: "master"
|
||||
gitea_default_private: "public"
|
||||
gitea_repository_root: "{{ gitea_home }}/repos"
|
||||
# ui
|
||||
gitea_show_user_email: false
|
||||
gitea_disable_gravatar: true
|
||||
gitea_enable_captcha: true
|
||||
gitea_only_allow_external_registration: false
|
||||
gitea_enable_notify_mail: true
|
||||
gitea_autowatch_on_change: true
|
||||
gitea_force_private: false
|
||||
gitea_oauth2_enabled: true
|
||||
# server
|
||||
gitea_protocol: "https"
|
||||
gitea_http_domain: "https://{{ gitea_fqdn }}"
|
||||
gitea_http_port: 3000
|
||||
# database
|
||||
gitea_db_type: postgres
|
||||
gitea_db_host: localhost
|
||||
gitea_db_name: gitea
|
||||
gitea_db_user: gitea
|
||||
gitea_db_password: changeme
|
||||
# indexer
|
||||
gitea_repo_indexer_enabled: true
|
||||
|
||||
# security
|
||||
gitea_disable_webhooks: false
|
||||
gitea_password_check_pwn: false
|
||||
# service
|
||||
gitea_disable_registration: true
|
||||
gitea_register_email_confirm: true
|
||||
gitea_require_signin: false
|
||||
gitea_default_keep_mail_private: true
|
||||
gitea_enable_captcha: false
|
||||
gitea_show_registration_button: false
|
||||
gitea_enable_notify_mail: true
|
||||
gitea_default_user_visibility: "limited"
|
||||
gitea_default_org_visibility: "limited"
|
||||
gitea_show_milestones_dashboard_page: false
|
||||
# Mailer
|
||||
gitea_mailer_enabled: true
|
||||
gitea_mailer_protocol: smtp
|
||||
gitea_mailer_smtp_addr: docker10.mgrote.net
|
||||
gitea_mailer_smtp_port: 1025
|
||||
gitea_mailer_from: "gitea@mgrote.net"
|
||||
|
||||
gitea_default_branch: 'master'
|
||||
|
||||
gitea_db_type: sqlite3
|
||||
gitea_db_path: "{{ gitea_home }}/data/gitea.db" # for sqlite3
|
||||
|
||||
gitea_ssh_listen: 0.0.0.0
|
||||
gitea_ssh_domain: gitea.mgrote.net
|
||||
gitea_ssh_port: 2222
|
||||
gitea_start_ssh: true
|
||||
|
||||
gitea_http_domain: git.mgrote.net
|
||||
gitea_http_listen: 0.0.0.0
|
||||
gitea_http_port: 3000
|
||||
gitea_disable_http_git: false
|
||||
gitea_protocol: http
|
||||
|
||||
gitea_show_registration_button: false
|
||||
gitea_require_signin: false
|
||||
gitea_disable_registration: true
|
||||
|
||||
gitea_fail2ban_enabled: true
|
||||
gitea_fail2ban_jail_maxretry: 3
|
||||
gitea_fail2ban_jail_findtime: 300
|
||||
gitea_fail2ban_jail_bantime: 600
|
||||
gitea_subject_prefix: "git.mgrote.net - " # muss der bindestrichs ein?
|
||||
# log
|
||||
gitea_log_systemd: true
|
||||
gitea_log_level: "Info"
|
||||
# Metrics
|
||||
gitea_metrics_enabled: false
|
||||
# Federation
|
||||
gitea_federation_enabled: false
|
||||
# Packages
|
||||
gitea_packages_enabled: false
|
||||
# actions
|
||||
gitea_actions_enabled: false
|
||||
# webhook: wird für drone benötigt, sonst wird der Webhook nicht "gesendet"
|
||||
# archive_cleanup: https://forum.gitea.com/t/how-to-configure-cron-task-for-delete-all-repositories-archives-zip-tar-gz-etc/4848/3
|
||||
gitea_extra_config: |
|
||||
[webhook]
|
||||
ALLOWED_HOST_LIST = *.mgrote.net
|
||||
|
||||
[cron.archive_cleanup]
|
||||
ENABLED = true
|
||||
RUN_AT_START = true
|
||||
SCHEDULE = @midnight
|
||||
|
||||
gitea_backup_on_upgrade: false
|
||||
gitea_backup_location: "{{ gitea_home }}/backups/"
|
||||
|
||||
submodules_versioncheck: true
|
||||
gitea_log_systemd: true
|
||||
gitea_log_level: "Info"
|
||||
# Fail2Ban configuration
|
||||
gitea_fail2ban_enabled: true
|
||||
gitea_fail2ban_jail_maxretry: "3"
|
||||
gitea_fail2ban_jail_findtime: "300"
|
||||
gitea_fail2ban_jail_bantime: "600"
|
||||
gitea_fail2ban_jail_action: "iptables-allports"
|
||||
|
|
|
|||
Loading…
Reference in a new issue