From 7a127649f4da18a772261cff8d3d36e9e8f92805 Mon Sep 17 00:00:00 2001
From: Peter Kurfer <peter.kurfer@googlemail.com>
Date: Tue, 3 Jan 2023 20:39:48 +0100
Subject: [PATCH] chore: upgrade Gitea and allow necessary release attachments

---
 k8s/roles/gitea/tasks/main.yml                |  2 +-
 k8s/roles/gitea/templates/values.gitea.yml.j2 | 10 ++++++++++
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/k8s/roles/gitea/tasks/main.yml b/k8s/roles/gitea/tasks/main.yml
index d3b8338..ce5086b 100644
--- a/k8s/roles/gitea/tasks/main.yml
+++ b/k8s/roles/gitea/tasks/main.yml
@@ -33,6 +33,6 @@
     name: gitea
     chart_ref: gitea/gitea
     release_namespace: gitea
-    chart_version: 6.0.3
+    chart_version: 6.0.5
     update_repo_cache: true
     release_values: "{{ lookup('template', 'values.gitea.yml.j2') | from_yaml }}"
diff --git a/k8s/roles/gitea/templates/values.gitea.yml.j2 b/k8s/roles/gitea/templates/values.gitea.yml.j2
index f4beabf..cc39831 100644
--- a/k8s/roles/gitea/templates/values.gitea.yml.j2
+++ b/k8s/roles/gitea/templates/values.gitea.yml.j2
@@ -24,6 +24,9 @@ persistence:
   size: 10Gi
   storageClass: hcloud-volumes
 
+image:
+  tag: "1.18.0"
+
 gitea:
   admin:
     existingSecret: gitea-admin-credentials
@@ -46,6 +49,11 @@ gitea:
       PROTOCOL: http
       ROOT_URL: https://code.icb4dc0.de/
       LFS_START_SERVER: 'true'
+    service:
+      DISABLE_REGISTRATION: 'true'
+      DEFAULT_KEEP_EMAIL_PRIVATE: 'true'
+      DEFAULT_ALLOW_CREATE_ORGANIZATION: 'false'
+      DEFAULT_USER_IS_RESTRICTED: 'true'
     storage:
       STORAGE_TYPE: minio
       MINIO_ENDPOINT: minio.minio.svc.cluster.local:9000
@@ -54,6 +62,8 @@ gitea:
       MINIO_BUCKET: gitea
       MINIO_LOCATION: us-east-1
       MINIO_USE_SSL: 'false'
+    attachment:
+      ALLOWED_TYPES: application/gzip|application/x-gzip|application/x-gtar|application/x-tgz|application/x-compressed-tar|text/plain
     database:
       DB_TYPE: postgres
       HOST: postgres-15-postgresql.postgres.svc.cluster.local:5432