chore: upgrade Gitea and allow necessary release attachments

k8s/roles/gitea/tasks/main.yml

@@ -33,6 +33,6 @@
     name: gitea
     chart_ref: gitea/gitea
     release_namespace: gitea
-    chart_version: 6.0.3
+    chart_version: 6.0.5
     update_repo_cache: true
     release_values: "{{ lookup('template', 'values.gitea.yml.j2') | from_yaml }}"

k8s/roles/gitea/templates/values.gitea.yml.j2

@@ -24,6 +24,9 @@ persistence:
   size: 10Gi
   storageClass: hcloud-volumes
 
+image:
+  tag: "1.18.0"
+
 gitea:
   admin:
     existingSecret: gitea-admin-credentials
@@ -46,6 +49,11 @@ gitea:
       PROTOCOL: http
       ROOT_URL: https://code.icb4dc0.de/
       LFS_START_SERVER: 'true'
+    service:
+      DISABLE_REGISTRATION: 'true'
+      DEFAULT_KEEP_EMAIL_PRIVATE: 'true'
+      DEFAULT_ALLOW_CREATE_ORGANIZATION: 'false'
+      DEFAULT_USER_IS_RESTRICTED: 'true'
     storage:
       STORAGE_TYPE: minio
       MINIO_ENDPOINT: minio.minio.svc.cluster.local:9000
@@ -54,6 +62,8 @@ gitea:
       MINIO_BUCKET: gitea
       MINIO_LOCATION: us-east-1
       MINIO_USE_SSL: 'false'
+    attachment:
+      ALLOWED_TYPES: application/gzip|application/x-gzip|application/x-gtar|application/x-tgz|application/x-compressed-tar|text/plain
     database:
       DB_TYPE: postgres
       HOST: postgres-15-postgresql.postgres.svc.cluster.local:5432