infrastructure/k8s/roles/gitea/templates/values.forgejo.yml.j2

image:
  rootless: true

service:
  ssh:
    type: NodePort
    nodePort: 32022

ingress:
  enabled: true
  hosts:
    - host: code.icb4dc0.de
      paths:
        - path: /
          pathType: Prefix

resources:
  limits:
    cpu: 500m
    memory: 3Gi
  requests:
    cpu: 250m
    memory: 512Mi

persistence:
  enabled: true
  size: 10Gi
  storageClass: hcloud-volumes

gitea:
  admin:
    existingSecret: forgejo-admin-credentials
  metrics:
    enabled: true
    serviceMonitor:
      enabled: true
      additionalLabels:
        prometheus: default
  config:
    repository:
      FILE_MAX_SIZE: 30
      MAX_FILES: 15
    repository.release:
      ALLOWED_TYPES: .bz2,.gz,.md,.pdf,.tgz,.txt,.zip,.tar.gz,.txt,application/gzip,application/x-gzip,application/x-gtar,application/x-tgz,application/x-compressed-tar,text/plain
    git.timeout:
      migrate: 3600
      default: 3600
      clone: 3600
      pull: 3600
      gc: 300
    log:
      level: Warn
    server:
      PROTOCOL: http
      ROOT_URL: https://code.icb4dc0.de/
      LFS_START_SERVER: 'true'
      LANDING_PAGE: explore
      ENABLE_GZIP: 'true'
      ENABLE_PPROF: 'true'
    service:
      DISABLE_REGISTRATION: 'true'
      DEFAULT_KEEP_EMAIL_PRIVATE: 'true'
      DEFAULT_ALLOW_CREATE_ORGANIZATION: 'false'
      DEFAULT_USER_IS_RESTRICTED: 'true'
    storage:
      STORAGE_TYPE: minio
      MINIO_ENDPOINT: minio.minio.svc.cluster.local:9000
      MINIO_ACCESS_KEY_ID: "{{ minio.rootUser }}"
      MINIO_SECRET_ACCESS_KEY: "{{ minio.rootPassword }}"
      MINIO_BUCKET: gitea
      MINIO_LOCATION: us-east-1
      MINIO_USE_SSL: 'false'
    attachment:
      ALLOWED_TYPES: .bz2,.gz,.md,.pdf,.tgz,.txt,.zip,.tar.gz,.txt,application/gzip,application/x-gzip,application/x-gtar,application/x-tgz,application/x-compressed-tar,text/plain
      MAX_SIZE: 30
      MAX_FILES: 15
      STORAGE_TYPE: minio
      MINIO_ENDPOINT: minio.minio.svc.cluster.local:9000
      MINIO_ACCESS_KEY_ID: "{{ minio.rootUser }}"
      MINIO_SECRET_ACCESS_KEY: "{{ minio.rootPassword }}"
      MINIO_BUCKET: gitea
      MINIO_LOCATION: us-east-1
      MINIO_USE_SSL: 'false'
    database:
      DB_TYPE: postgres
      HOST: postgres-15-postgresql.postgres.svc.cluster.local:5432
      NAME: gitea
      USER: gitea
      PASSWD: "{{ gitea.dbPassword }}"
      log_sql: "false"
    metrics:
      ENABLED: true


postgresql:
  enabled: false