Add a gitea deployment

Yep, it's that time of year _again_

ansible/roles/gitea/files/app.ini

@@ -0,0 +1,102 @@
+APP_NAME = Gitea: Git with a cup of orange juice
+
+[repository]
+ROOT = /mnt/repositories
+DEFAULT_BRANCH = master
+DISABLE_STARS  = true
+
+[server]
+SSH_DOMAIN              = gitea.theorangeone.net
+ROOT_URL                = https://gitea.theorangeone.net/
+START_SSH_SERVER        = true
+SSH_PORT                = 22  # Makes the SSH URLs look sane
+SSH_LISTEN_PORT         = 2222
+BUILTIN_SSH_SERVER_USER = git
+LFS_START_SERVER        = true
+DOMAIN                  = gitea.theorangeone.net
+PROTOCOL                = http  # TLS termination done by Traefik
+ENABLE_GZIP             = true
+OFFLINE_MODE            = true
+LANDING_PAGE            = explore
+LFS_JWT_SECRET          = {{ lfs_jwt_secret }}
+
+[database]
+DB_TYPE  = postgres
+HOST     = db:5432
+NAME     = gitea
+USER     = gitea
+PASSWD   = gitea
+
+[session]
+PROVIDER        = db
+COOKIE_NAME     = gitea_session
+
+[log]
+ENABLE_ACCESS_LOG = false
+
+[security]
+INSTALL_LOCK                  = true
+SECRET_KEY                    = {{ secret_key }}
+INTERNAL_TOKEN                = {{ internal_token }}
+PASSWORD_HASH_ALGO            = pbkdf2
+COOKIE_USERNAME               = gitea_username
+COOKIE_REMEMBER_NAME          = gitea_remember
+LOGIN_REMEMBER_DAYS           = 30
+
+[service]
+DISABLE_REGISTRATION              = true
+ENABLE_CAPTCHA                    = false
+SHOW_MILESTONES_DASHBOARD_PAGE    = false
+ENABLE_TIMETRACKING               = false
+DEFAULT_ORG_MEMBER_VISIBLE = true
+
+[ui.metadata]
+DESCRIPTION = Gitea (Git with a cup of orange juice)
+AUTHOR      = Jake Howard
+
+[ui.user]
+REPO_PAGING_NUM = 100
+
+[ui]
+SITEMAP_PAGING_NUM   = 100
+FEED_PAGING_NUM      = 100
+DEFAULT_THEME        = gitea
+ISSUE_PAGING_NUM     = 100
+THEME_COLOR_META_TAG = "#ff7f00"
+FEED_MAX_COMMIT_NUM  = 30
+SHOW_USER_EMAIL      = false
+EXPLORE_PAGING_NUM   = 100
+
+[openid]
+ENABLE_OPENID_SIGNIN = false
+ENABLE_OPENID_SIGNUP = false
+
+[service.explore]
+DISABLE_USERS_PAGE = true
+
+[queue]
+CONN_STR = redis://redis:6379/0
+TYPE     = redis
+
+[cache]
+ADAPTER = redis
+HOST    = redis://redis:6379/1
+ITEM_TTL = 48h
+
+[other]
+SHOW_FOOTER_TEMPLATE_LOAD_TIME = false
+SHOW_FOOTER_VERSION            = false
+SHOW_FOOTER_BRANDING=false
+
+[mirror]
+DEFAULT_INTERVAL = 1h
+
+[cron]
+ENABLED = true
+
+[indexer]
+REPO_INDEXER_ENABLED = true
+ISSUE_INDEXER_TYPE   = db
+
+[lfs]
+PATH = /mnt/lfs

ansible/roles/gitea/files/docker-compose.yml

@@ -0,0 +1,49 @@
+version: "2.3"
+
+services:
+  gitea:
+    image: gitea/gitea:1.18.1-rootless
+    user: "{{ docker_user.id }}:{{ docker_user.id }}"
+    environment:
+      - TZ={{ timezone }}
+    volumes:
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+      - "{{ app_data_dir }}/gitea/data:/var/lib/gitea"
+      - "{{ app_data_dir }}/gitea/config:/etc/gitea"
+      - /mnt/tank/files/gitea-repositories/repositories:/mnt/repositories
+      - /mnt/tank/files/gitea-repositories/lfs:/mnt/lfs
+    tmpfs:
+      - /var/lib/gitea/tmp
+    restart: unless-stopped
+    ports:
+      - "{{ pve_hosts.docker.ip }}:2222:2222"
+    depends_on:
+      - db
+      - redis
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.gitea.rule=Host(`gitea.theorangeone.net`)
+      - traefik.http.services.gitea-gitea.loadbalancer.server.port=3000
+    networks:
+      - default
+      - traefik
+
+  db:
+    image: postgres:14-alpine
+    restart: unless-stopped
+    volumes:
+      - /mnt/tank/dbs/postgres/gitea:/var/lib/postgresql/data
+    environment:
+      - POSTGRES_PASSWORD=gitea
+      - POSTGRES_USER=gitea
+
+  redis:
+    image: redis:7-alpine
+    restart: unless-stopped
+    volumes:
+      - /mnt/tank/dbs/redis/gitea:/data
+
+networks:
+  traefik:
+    external: true