Add edge01 Gitea configuration

edge01/docker/gitea/.gitignore

@@ -0,0 +1,5 @@
+.env
+config/app.ini
+data/
+postgres/
+backups/

edge01/docker/gitea/README.md

@@ -0,0 +1,24 @@
+# Gitea
+
+## Purpose
+Self-hosted Git server for Zerafa infrastructure and projects.
+
+## URL
+https://git.zerafa.com
+
+## Containers
+- gitea
+- gitea-postgres
+
+## Runtime Data
+- data/
+- postgres/
+
+These directories are intentionally excluded from Git.
+
+## Configuration
+- compose.yaml
+- config/app.ini
+
+## Backup
+Protected by nightly Restic backups on edge01.

edge01/docker/gitea/compose.yaml

@@ -0,0 +1,50 @@
+services:
+  postgres:
+    image: postgres:16-alpine
+    container_name: gitea-postgres
+    restart: unless-stopped
+    env_file:
+      - .env
+    volumes:
+      - ./postgres:/var/lib/postgresql/data
+    networks:
+      - gitea-internal
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U gitea -d gitea"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+  gitea:
+    image: gitea/gitea:latest
+    container_name: gitea
+    restart: unless-stopped
+    ports:
+      - "2222:22"
+    depends_on:
+      postgres:
+        condition: service_healthy
+    env_file:
+      - .env
+    environment:
+      - GITEA__database__DB_TYPE=postgres
+      - GITEA__database__HOST=postgres:5432
+      - GITEA__database__NAME=${POSTGRES_DB}
+      - GITEA__database__USER=${POSTGRES_USER}
+      - GITEA__database__PASSWD=${POSTGRES_PASSWORD}
+      - GITEA__server__DOMAIN=git.zerafa.com
+      - GITEA__server__ROOT_URL=https://git.zerafa.com/
+      - GITEA__server__HTTP_PORT=3000
+      - GITEA__service__DISABLE_REGISTRATION=true
+    volumes:
+      - ./data:/data
+    networks:
+      - gitea-internal
+      - proxy
+
+networks:
+  gitea-internal:
+    internal: true
+
+  proxy:
+    external: true

edge01/docker/gitea/config/app.ini.example

@@ -0,0 +1,95 @@
+APP_NAME = ZCom Git
+RUN_MODE = prod
+RUN_USER = git
+WORK_PATH = /data/gitea
+
+[repository]
+ROOT = /data/git/repositories
+
+[repository.local]
+LOCAL_COPY_PATH = /data/gitea/tmp/local-repo
+
+[repository.upload]
+TEMP_PATH = /data/gitea/uploads
+
+[server]
+APP_DATA_PATH = /data/gitea
+DOMAIN = git.zerafa.com
+SSH_DOMAIN = git.zerafa.com
+HTTP_PORT = 3000
+ROOT_URL = https://git.zerafa.com/
+DISABLE_SSH = false
+SSH_PORT = 2222
+SSH_LISTEN_PORT = 22
+LFS_START_SERVER = true
+LFS_JWT_SECRET = REPLACE_ME
+
+[database]
+PATH = /data/gitea/gitea.db
+DB_TYPE = postgres
+HOST = postgres:5432
+NAME = gitea
+USER = gitea
+PASSWD = h53AdnR7R7a1NRSsuVmgyhnTlTA3daxnuPcV6gF+Xrg=
+LOG_SQL = false
+SCHEMA = 
+SSL_MODE = disable
+
+[indexer]
+ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve
+
+[session]
+PROVIDER_CONFIG = /data/gitea/sessions
+PROVIDER = file
+
+[picture]
+AVATAR_UPLOAD_PATH = /data/gitea/avatars
+REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
+
+[attachment]
+PATH = /data/gitea/attachments
+
+[log]
+MODE = console
+LEVEL = info
+ROOT_PATH = /data/gitea/log
+
+[security]
+INSTALL_LOCK = true
+SECRET_KEY = 
+INTERNAL_TOKEN = REPLACE_ME
+PASSWORD_HASH_ALGO = pbkdf2
+
+[service]
+DISABLE_REGISTRATION = true
+REQUIRE_SIGNIN_VIEW = false
+REGISTER_EMAIL_CONFIRM = false
+ENABLE_NOTIFY_MAIL = false
+ALLOW_ONLY_EXTERNAL_REGISTRATION = false
+ENABLE_CAPTCHA = false
+DEFAULT_KEEP_EMAIL_PRIVATE = false
+DEFAULT_ALLOW_CREATE_ORGANIZATION = true
+DEFAULT_ENABLE_TIMETRACKING = true
+NO_REPLY_ADDRESS = noreply.git.zerafa.com
+
+[lfs]
+PATH = /data/git/lfs
+
+[mailer]
+ENABLED = false
+
+[openid]
+ENABLE_OPENID_SIGNIN = true
+ENABLE_OPENID_SIGNUP = false
+
+[cron.update_checker]
+ENABLED = false
+
+[repository.pull-request]
+DEFAULT_MERGE_STYLE = merge
+
+[repository.signing]
+DEFAULT_TRUST_MODEL = committer
+
+[oauth2]
+JWT_SECRET = REPLACE_ME