gitea app.ini

docker-compose.yml

@@ -79,6 +79,7 @@ services:
       - pg-nextcloud
     networks:
       - proxy
+      - mail
       - nextcloud
 
   pg-nextcloud:
@@ -136,6 +137,7 @@ services:
       - DB_PASSWD=gitea
     volumes:
       - /srv/gitea/data:/data
+      - ./gitea/app.ini:/data/gitea/conf/app.ini
     networks:
       - proxy
       - mail

gitea/app.ini

@@ -0,0 +1,90 @@
+APP_NAME = Gitea: Git with a cup of tea
+RUN_MODE = prod
+RUN_USER = git
+
+[repository]
+ROOT = /data/git/repositories
+
+[repository.local]
+LOCAL_COPY_PATH = /data/gitea/tmp/local-repo
+
+[repository.upload]
+TEMP_PATH = /data/gitea/uploads
+
+[server]
+APP_DATA_PATH    = /data/gitea
+SSH_DOMAIN       = git.local.lan
+HTTP_PORT        = 3000
+ROOT_URL         = https://git.local.lan/
+DISABLE_SSH      = false
+SSH_PORT         = 222
+SSH_LISTEN_PORT  = 22
+LFS_START_SERVER = true
+LFS_CONTENT_PATH = /data/git/lfs
+DOMAIN           = git.local.lan
+LFS_JWT_SECRET   = Qs_msL23l3tIpamHgpHLCxq0Wt-S_yGu9ShCVQ4oR28
+OFFLINE_MODE     = false
+
+[database]
+PATH     = /data/gitea/gitea.db
+DB_TYPE  = postgres
+HOST     = pg-gitea:5432
+NAME     = gitea
+USER     = gitea
+PASSWD   = gitea
+SSL_MODE = disable
+CHARSET  = utf8
+
+[indexer]
+ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve
+
+[session]
+PROVIDER_CONFIG = /data/gitea/sessions
+PROVIDER        = file
+
+[picture]
+AVATAR_UPLOAD_PATH            = /data/gitea/avatars
+REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
+DISABLE_GRAVATAR              = false
+ENABLE_FEDERATED_AVATAR       = true
+
+[attachment]
+PATH = /data/gitea/attachments
+
+[log]
+ROOT_PATH = /data/gitea/log
+MODE      = file
+LEVEL     = info
+
+[security]
+INSTALL_LOCK   = true
+SECRET_KEY     = 1dmAXVZNMaEJ0DyX24EK31uJki7n9Eaf8VMOtSxXorDhOkcoA8xuhWVrbqoARuLx
+INTERNAL_TOKEN = eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE1NzIyODQ5OTF9.yCUgowN1E7_qXvrElgUgB9YQxXJ8U3aZcox1cE-cafM
+
+[service]
+DISABLE_REGISTRATION              = true
+REQUIRE_SIGNIN_VIEW               = false
+REGISTER_EMAIL_CONFIRM            = false
+ENABLE_NOTIFY_MAIL                = true
+ALLOW_ONLY_EXTERNAL_REGISTRATION  = false
+ENABLE_CAPTCHA                    = false
+DEFAULT_KEEP_EMAIL_PRIVATE        = false
+DEFAULT_ALLOW_CREATE_ORGANIZATION = true
+DEFAULT_ENABLE_TIMETRACKING       = true
+NO_REPLY_ADDRESS                  = noreply.example.org
+
+[oauth2]
+JWT_SECRET = nT1JEnuS1IxRXMh5ufFzNp0nPur18vmN43oHRr2RLHI
+
+[mailer]
+ENABLED = true
+HOST    = mail:25
+FROM    = gitea@local.lan
+USER    = git@local.lan
+PASSWD  = 'pass'
+SKIP_VERIFY = true
+
+[openid]
+ENABLE_OPENID_SIGNIN = false
+ENABLE_OPENID_SIGNUP = false
+

proxy/Caddyfile

@@ -15,6 +15,10 @@ https://local.lan {
     }
 }
 
+http://*.local.lan {
+    redir https://{host}{uri}
+}
+
 https://echo.local.lan {
     log / stdout "{host} - {common}"
     errors stdout
@@ -32,6 +36,7 @@ https://cloud.local.lan {
     gzip
     proxy / nextcloud:80 {
         transparent
+        header_upstream X-Forwarded-Host {host}
     }
     redir {
         /.well-known/carddav /remote.php/dav