1
0
Fork 0
gopoop.org/gitea.yaml

105 lines
4.3 KiB
YAML
Executable File

---
- name: Setup Gitea
hosts: all
vars_files:
- vault.yaml
- vars.yaml
tasks:
- name: Run Gitea Postgres DB
docker_container:
name: "{{ stack_prefix_name }}gitea-db"
recreate: true
restart_policy: unless-stopped
image: postgres:14.2
cgroupns_mode: host
env:
USER_UID: "1000"
USER_GID: "1000"
POSTGRES_USER: gitea
POSTGRES_DB: gitea
POSTGRES_PASSWORD: "{{ secret_gitea_db_password }}"
networks:
- name: "{{ stack_internal_network }}"
mounts:
- source: "{{ stack_prefix_name }}gitea_db_data"
target: /var/lib/postgresql/data
state: "{{ container_state }}"
- name: Run Gitea
docker_container:
name: "{{ stack_prefix_name }}gitea"
recreate: true
restart_policy: always
image: ghcr.io/noenv/gitea:1.21.0
cgroupns_mode: host
env:
APP_NAME: "Sean's Code"
USER_UID: "1000"
USER_GID: "1000"
GITEA__database__DB_TYPE: postgres
GITEA__database__HOST: "{{ stack_prefix_name }}gitea-db:5432"
GITEA__database__NAME: gitea
GITEA__database__USER: gitea
GITEA__database__PASSWD: "{{ secret_gitea_db_password }}"
GITEA__repository__DEFAULT_PUSH_CREATE_PRIVATE: "false"
GITEA__repository__ENABLE_PUSH_CREATE_USER: "true"
GITEA__repository__ROOT: /app/gitea/data/gitea-repositories
GITEA__markup_0X2E_asciidoc__ENABLED": "true"
GITEA__markup_0X2E_asciidoc__FILE_EXTENSIONS": .adoc,.asciidoc
GITEA__markup_0X2E_asciidoc__RENDER_COMMAND": "asciidoctor -s -a showtitle -a env-gitea -a env=gitea --out-file=- -"
GITEA__markup_0X2E_asciidoc__IS_INPUT_FILE": "false"
GITEA__server__SSH_DOMAIN: code.sean.wtf
GITEA__server__DOMAIN: code.sean.wtf
GITEA__server__HTTP_PORT: "3000"
GITEA__server__ROOT_URL: https://code.sean.wtf/
GITEA__server__DISABLE_SSH: "true"
GITEA__server__LFS_START_SERVER: "true"
GITEA__server__LFS_CONTENT_PATH: /app/gitea/data/lfs
GITEA__server__LFS_JWT_SECRET: "{{ secret_gitea_lfs_jwt_secret }}"
GITEA__server__OFFLINE_MODE: "false"
GITEA__service__REGISTER_EMAIL_CONFIRM: "true"
GITEA__service__ENABLE_NOTIFY_MAIL: "true"
GITEA__service__DISABLE_REGISTRATION: "true"
GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION: "false"
GITEA__service__ENABLE_CAPTCHA: "false"
GITEA__service__REQUIRE_SIGNIN_VIEW: "false"
GITEA__service__DEFAULT_KEEP_EMAIL_PRIVATE: "true"
GITEA__service__DEFAULT_ALLOW_CREATE_ORGANIZATION: "true"
GITEA__service__DEFAULT_ENABLE_TIMETRACKING: "true"
GITEA__service__NO_REPLY_ADDRESS: noreply.code.sean.wtf
GITEA__picture__DISABLE_GRAVATAR: "false"
GITEA__picture__ENABLE_FEDERATED_AVATAR: "true"
GITEA__openid__ENABLE_OPENID_SIGNIN: "false"
GITEA__openid__ENABLE_OPENID_SIGNUP: "false"
GITEA__mailer__ENABLED: "true"
GITEA__mailer__FROM: emailer@code.sean.wtf
GITEA__mailer__MAILER_TYPE: smtp
GITEA__mailer__HOST: "smtp.postmarkapp.com:587"
GITEA__mailer__IS_TLS_ENABLED: "false"
GITEA__mailer__USER: "PM-T-outbound-i4Tbw1z7h0p49hDNBsh50W"
GITEA__mailer__PASSWD: "{{ secret_gitea_postmark_transactional_password }}"
GITEA__mailer__DISABLE_HELO: "false"
GITEA__mailer__HELO_HOSTNAME: code.sean.wtf
GITEA__federation__ENABLED: "true"
GITEA__federation__SHARE_USER_STATISTICS: "true"
GITEA__federation__MAX_SIZE: "4"
networks:
- name: "{{ stack_internal_network }}"
- name: "{{ stack_external_network }}"
# May need to open ssh ports for some things. Maybe not.
mounts:
- source: "{{ stack_prefix_name}}gitea_repositories"
target: /app/gitea/data/gitea-repositories
- source: "{{ stack_prefix_name }}gitea_data"
target: /data
- source: /etc/timezone
target: /etc/timezone:ro
type: bind
- source: /etc/localtime
target: /etc/localtime:ro
type: bind
state: "{{ container_state }}"