.

docker-compose-home.yml

@@ -63,12 +63,23 @@ services:
       replicas: 1
       restart_policy:
         condition: any
-    image: gitea/gitea:latest
+    image: ${LOCAL_DOCKER_REGISTRY}gitea
     environment:
       - USER_UID=1000
       - USER_GID=1000
       - ROOT_URL=https://${GIT_DOMAIN}/git
       - SSH_DOMAIN=${GIT_DOMAIN}
+      - GITEA_APP_NAME=${GITEA_APP_NAME}
+      - GIT_DOMAIN=${GIT_DOMAIN}
+      - GITEA_SERVER_LFS_JWT_SECRET=$GITEA_SERVER_LFS_JWT_SECRET
+      - GITEA_SECURITY_SECRET_KEY=$GITEA_SECURITY_SECRET_KEY
+      - GITEA_SECURITY_INTERNAL_TOKEN=$GITEA_SECURITY_INTERNAL_TOKEN
+      - GITEA_OAUTH2_JWT_SECRET=$GITEA_OAUTH2_JWT_SECRET
+      - GITEA_MAILER_HOST=$GITEA_MAILER_HOST
+      - GITEA_MAILER_USER=$GITEA_MAILER_USER
+      - GITEA_MAILER_FROM=$GITEA_MAILER_FROM
+      - GITEA_MAILER_PASSWD=$GITEA_MAILER_PASSWD
+
     volumes:
       - gitea-app:/data
     ports:

drone-starlark/repos/echo-secret.star

@@ -1,7 +1,7 @@
 load("@this//:secret-to-environment.star", "secretToEnvironment")
 
 def echoSecret(secret):
-  return 'echo "export {environment}=???" >> ***filename*** # {secret}'.format(
+  return 'echo "export {environment}=??? ${environment}" >> ***filename*** # {secret}'.format(
       secret = secret,
       environment = secretToEnvironment(secret),
     )

drone-starlark/repos/stack/drone.star

@@ -41,6 +41,7 @@ def drone(
             publicSecrets,
             secretSecrets,
           ),
+          build("gitea"),
           build("ngrok-gitea"),
           build("guacamole-postgresql"),
           build("letsencrypt-nginx"),

drone-starlark/repos/stack/public-secrets.star

@@ -17,4 +17,8 @@ publicSecrets = [
   "ghost-mail-user",
   "chat-admin-name",
   "chat-admin-email",
+  "gitea-mailer-host",
+  "gitea-mailer-from",
+  "gitea-mailer-user",
+  "gitea-app-name"
 ]

drone-starlark/repos/stack/secret-secrets.star

@@ -6,4 +6,9 @@ secretSecrets = [
   "ngrok-auth-token",
   "ghost-mail-password",
   "chat-admin-password",
+  "gitea-server-lfs-jwt-secret",
+  "gitea-security-secret-key",
+  "gitea-security-internal-token",
+  "gitea-oauth2-jwt-secret",
+  "gitea-mailer-passwd",
 ]

gitea/Dockerfile

@@ -0,0 +1,4 @@
+FROM gitea/gitea:latest
+COPY app.ini /init/
+COPY run.sh /
+CMD ["sh", "/run.sh"]

gitea/app.ini

@@ -0,0 +1,89 @@
+APP_NAME = ${GITEA_APP_NAME}
+RUN_MODE = prod
+RUN_USER = git
+
+[repository]
+ROOT = /data/git/repositories
+
+[repository.local]
+LOCAL_COPY_PATH = /data/gitea/tmp/local-repo
+
+[repository.upload]
+TEMP_PATH = /data/gitea/uploads
+
+[server]
+APP_DATA_PATH    = /data/gitea
+SSH_DOMAIN       = ${GIT_DOMAIN}
+HTTP_PORT        = 3000
+ROOT_URL         = https://${GIT_DOMAIN}/git/
+DISABLE_SSH      = false
+SSH_PORT         = 22
+SSH_LISTEN_PORT  = 22
+LFS_START_SERVER = true
+LFS_CONTENT_PATH = /data/git/lfs
+DOMAIN           = ${GIT_DOMAIN}
+LFS_JWT_SECRET   = ${GITEA_SERVER_LFS_JWT_SECRET}
+OFFLINE_MODE     = false
+
+[database]
+PATH     = /data/gitea/gitea.db
+DB_TYPE  = sqlite3
+HOST     = localhost:3306
+NAME     = gitea
+USER     = root
+PASSWD   = 
+SCHEMA   = 
+SSL_MODE = disable
+CHARSET  = utf8
+
+[indexer]
+ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve
+
+[session]
+PROVIDER_CONFIG = /data/gitea/sessions
+PROVIDER        = file
+
+[picture]
+AVATAR_UPLOAD_PATH            = /data/gitea/avatars
+REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
+DISABLE_GRAVATAR              = false
+ENABLE_FEDERATED_AVATAR       = true
+
+[attachment]
+PATH = /data/gitea/attachments
+
+[log]
+ROOT_PATH = /data/gitea/log
+MODE      = file
+LEVEL     = info
+
+[security]
+INSTALL_LOCK   = true
+SECRET_KEY     = ${GITEA_SECURITY_SECRET_KEY}
+INTERNAL_TOKEN = ${GITEA_SECURITY_INTERNAL_TOKEN}
+PASSWORD_COMPLEXITY = off
+[service]
+DISABLE_REGISTRATION              = false
+REQUIRE_SIGNIN_VIEW               = false
+REGISTER_EMAIL_CONFIRM            = true
+ENABLE_NOTIFY_MAIL                = true
+ALLOW_ONLY_EXTERNAL_REGISTRATION  = false
+ENABLE_CAPTCHA                    = false
+DEFAULT_KEEP_EMAIL_PRIVATE        = false
+DEFAULT_ALLOW_CREATE_ORGANIZATION = true
+DEFAULT_ENABLE_TIMETRACKING       = true
+NO_REPLY_ADDRESS                  = noreply.${GIT_DOMAIN}
+
+[oauth2]
+JWT_SECRET = ${GITEA_OAUTH2_JWT_SECRET}
+
+[mailer]
+ENABLED = true
+HOST    = ${GITEA_MAILER_HOST}
+FROM    = ${GITEA_MAILER_FROM}
+USER    = ${GITEA_MAILER_USER}
+PASSWD  = ${GITEA_MAILER_PASSWD}
+
+[openid]
+ENABLE_OPENID_SIGNIN = true
+ENABLE_OPENID_SIGNUP = true

gitea/run.sh

@@ -0,0 +1,2 @@
+envsubst < /init/app.ini > /data/gitea/conf/app.ini
+/bin/s6-svscan /etc/s6