APP_NAME = Forgejo: Beyond coding. We forge.
RUN_MODE = prod
RUN_USER = git
WORK_PATH = /data/gitea

[repository]
ROOT = /data/git/repositories
DEFAULT_PRIVATE = true

[repository.local]
LOCAL_COPY_PATH = /data/gitea/tmp/local-repo

[repository.upload]
TEMP_PATH = /data/gitea/uploads

[server]
APP_DATA_PATH = /data/gitea
DOMAIN = git.${BASE_DOMAIN}
SSH_DOMAIN = git.${BASE_DOMAIN}
HTTP_PORT = 3000
ROOT_URL = https://git.${BASE_DOMAIN}/
DISABLE_SSH = false
SSH_PORT = ${FORGEJO_SSH_PORT}
SSH_LISTEN_PORT = 23
LFS_START_SERVER = true
LFS_JWT_SECRET = ${FORGEJO_LFS_JWT_SECTRET}
OFFLINE_MODE = false
START_SSH_SERVER = true

[database]
DB_TYPE = postgres
HOST = pg-forgejo
NAME = forgejo
USER = forgejo
PASSWD = ${FORGEJO_PG_PWD}
LOG_SQL = false
SCHEMA = 
SSL_MODE = disable

[indexer]
ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve

[session]
PROVIDER_CONFIG = /data/gitea/sessions
PROVIDER = file

[picture]
AVATAR_UPLOAD_PATH = /data/gitea/avatars
REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars

[attachment]
PATH = /data/gitea/attachments

[log]
MODE = console,file
LEVEL = info
ROOT_PATH = /data/gitea/log
ENABLE_SSH_LOG = true

[security]
INSTALL_LOCK = ${FORGEJO_SETUP_LOCK}
SECRET_KEY = ${FORGEJO_SECRET_KEY}
REVERSE_PROXY_LIMIT = 1
REVERSE_PROXY_TRUSTED_PROXIES = *
INTERNAL_TOKEN = ${FORGEJO_INTERNAL_TOKEN}
PASSWORD_HASH_ALGO = pbkdf2_hi

[service]
DISABLE_REGISTRATION = false
REQUIRE_SIGNIN_VIEW = false
REGISTER_EMAIL_CONFIRM = false
ENABLE_NOTIFY_MAIL = false
ALLOW_ONLY_EXTERNAL_REGISTRATION = true
ENABLE_CAPTCHA = false
DEFAULT_KEEP_EMAIL_PRIVATE = false
DEFAULT_ALLOW_CREATE_ORGANIZATION = true
DEFAULT_ENABLE_TIMETRACKING = true
NO_REPLY_ADDRESS = noreply.localhost

[service.explore]
DISABLE_USERS_PAGE = true

[lfs]
PATH = /data/git/lfs

[mailer]
ENABLED = true
SMTP_ADDR = mail
SMTP_PORT = 25
FROM = ${FORGEJO_MAIL_FROM}@${BASE_DOMAIN}

[openid]
ENABLE_OPENID_SIGNIN = false
ENABLE_OPENID_SIGNUP = false

[cron.update_checker]
ENABLED = false

[repository.pull-request]
DEFAULT_MERGE_STYLE = squash

[repository.signing]
DEFAULT_TRUST_MODEL = committer

[oauth2]
JWT_SECRET = ${FORGEJO_JWT_SECRET}

[webhook]
ALLOWED_HOST_LIST = *.${BASE_DOMAIN}