---
- name: Setup Gitea

  hosts: all

  vars_files:
    - vault.yaml
    - vars.yaml

  tasks:
    - name: Run Gitea Postgres DB
      docker_container:
        name: "{{ stack_prefix_name }}gitea-db"
        recreate: true
        restart_policy: unless-stopped
        image: postgres:14.2
        env:
          USER_UID: "1000"
          USER_GID: "1000"
          POSTGRES_USER: gitea
          POSTGRES_DB: gitea
          POSTGRES_PASSWORD: "{{ secret_gitea_db_password }}"
        networks:
          - name: "{{ stack_internal_network }}"
        mounts:
          - source: "{{ stack_prefix_name }}gitea_db_data"
            target: /var/lib/postgresql/data
        state: "{{ container_state }}"

    - name: Run Gitea
      docker_container:
        name: "{{ stack_prefix_name }}gitea"
        recreate: true
        restart_policy: always
        image: ghcr.io/noenv/gitea:1.17.2
        published_ports:
          - "3000:3000"
        env:
          APP_NAME: "Sean's Code"
          USER_UID: "1000"
          USER_GID: "1000"
          GITEA__database__DB_TYPE: postgres
          GITEA__database__HOST: "{{ stack_prefix_name }}gitea-db:5432"
          GITEA__database__NAME: gitea
          GITEA__database__USER: gitea
          GITEA__database__PASSWD: "{{ secret_gitea_db_password }}"
          GITEA__repository__DEFAULT_PUSH_CREATE_PRIVATE: "false"
          GITEA__repository__ENABLE_PUSH_CREATE_USER: "true"
          GITEA__repository__ROOT: /app/gitea/data/gitea-repositories
          GITEA__markup_0X2E_asciidoc__ENABLED": "true"
          GITEA__markup_0X2E_asciidoc__FILE_EXTENSIONS": .adoc,.asciidoc
          GITEA__markup_0X2E_asciidoc__RENDER_COMMAND": "asciidoctor -s -a showtitle -a env-gitea -a env=gitea --out-file=- -"
          GITEA__markup_0X2E_asciidoc__IS_INPUT_FILE": "false"
          GITEA__server__SSH_DOMAIN: code.sean.wtf
          GITEA__server__DOMAIN: code.sean.wtf
          GITEA__server__HTTP_PORT: "3000"
          GITEA__server__ROOT_URL: https://code.sean.wtf/
          GITEA__server__DISABLE_SSH: "true"
          GITEA__server__LFS_START_SERVER: "true"
          GITEA__server__LFS_CONTENT_PATH: /app/gitea/data/lfs
          GITEA__server__LFS_JWT_SECRET: "{{ secret_gitea_lfs_jwt_secret }}"
          GITEA__server__OFFLINE_MODE: "false"
          GITEA__service__REGISTER_EMAIL_CONFIRM: "true"
          GITEA__service__ENABLE_NOTIFY_MAIL: "true"
          GITEA__service__DISABLE_REGISTRATION: "true"
          GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION: "false"
          GITEA__service__ENABLE_CAPTCHA: "false"
          GITEA__service__REQUIRE_SIGNIN_VIEW: "false"
          GITEA__service__DEFAULT_KEEP_EMAIL_PRIVATE: "true"
          GITEA__service__DEFAULT_ALLOW_CREATE_ORGANIZATION: "true"
          GITEA__service__DEFAULT_ENABLE_TIMETRACKING: "true"
          GITEA__service__NO_REPLY_ADDRESS: noreply.code.sean.wtf
          GITEA__picture__DISABLE_GRAVATAR: "false"
          GITEA__picture__ENABLE_FEDERATED_AVATAR: "true"
          GITEA__openid__ENABLE_OPENID_SIGNIN: "false"
          GITEA__openid__ENABLE_OPENID_SIGNUP: "false"
          GITEA__mailer__ENABLED: "true"
          GITEA__mailer__FROM: emailer@code.sean.wtf
          GITEA__mailer__MAILER_TYPE: smtp
          GITEA__mailer__HOST: "smtp.postmarkapp.com:587"
          GITEA__mailer__IS_TLS_ENABLED: "false"
          GITEA__mailer__USER: "PM-T-outbound-i4Tbw1z7h0p49hDNBsh50W"
          GITEA__mailer__PASSWD: "{{ secret_gitea_postmark_transactional_password }}"
          GITEA__mailer__DISABLE_HELO: "false"
          GITEA__mailer__HELO_HOSTNAME: code.sean.wtf
          GITEA__federation__ENABLED: "true"
          GITEA__federation__SHARE_USER_STATISTICS: "true"
          GITEA__federation__MAX_SIZE: "4"
        networks:
          - name: "{{ stack_internal_network }}"
          - name: "{{ stack_external_network }}"
        # May need to open ssh ports for some things. Maybe not.
        mounts:
          - source: "{{ stack_prefix_name}}gitea_repositories"
            target: /app/gitea/data/gitea-repositories
          - source: "{{ stack_prefix_name }}gitea_data"
            target: /data
          - source: /etc/timezone
            target: /etc/timezone:ro
            type: bind
          - source: /etc/localtime
            target: /etc/localtime:ro
            type: bind
        state: "{{ container_state }}"