image:
    tag: 1.26.2
ingress:
    enabled: true
    hosts:
        - host: git.vhaudiquet.fr
          paths:
            - path: /
              pathType: Prefix
# Disable HA, we are on a 1-node cluster
redis-cluster:
    enabled: false
redis:
    enabled: true
postgresql:
    enabled: true
    global:
        postgresql:
            auth:
                postgressPassword: ENC[AES256_GCM,data:VVBsXwglQd9PWw==,iv:bQhq4WjS2/5dNxmuuTcEUDsHbkWECFDDjFg+SCDc/WQ=,tag:c5wVnj/vdDRuhKkJ7pP4yw==,type:str]
                password: ENC[AES256_GCM,data:o//XslP4IGAg6A==,iv:dJrETtegyBDnTeazpCG+JU6z3CNDckRyaJMb5QlzwRw=,tag:hRt43K4/ymC0Va/UpI+VZA==,type:str]
                database: gitea
                username: ENC[AES256_GCM,data:evM49sM=,iv:uXaYq7nuN8vj0jrihU88j66Q0LAxQA3UwQIr/zEzumM=,tag:AkcoP05gx00Kfh0nPRSAuw==,type:str]
    volumePermissions:
        enabled: true
postgresql-ha:
    enabled: false
persistence:
    enabled: true
    subPath: data
extraVolumes:
    - name: git
      nfs:
        server: truenas.lan
        path: /mnt/fast_app_data/git
extraContainerVolumeMounts:
    - name: git
      mountPath: /git
clusterDomain: cluster.local
gitea:
    oauth:
        - name: Authentik
          provider: openidConnect
          key: ENC[AES256_GCM,data:gyLucoZbo/91yZWPGIrmVBhv3hX4/ZoDNBi6Zmr3/kQKsnGxUVvmQQ==,iv:Md/UgUrrtY9J4JF0+ldgQluNz33OTH7aXEAedSJYVsM=,tag:Zooqlmk+4zPo0YypJG6IdQ==,type:str]
          secret: ENC[AES256_GCM,data:shGtDGYPSGlUU5dfYH1ahTSqHaFQiI23iDMzsvf7WX22PobkcYmeucvzUdFQkUXs7FJjrbgW/bdZ0HLUp2QdPiTSH0sDxgTlMaQvJ6NGE83POkcRwD4HRft9TdXyEq2xrk0k7AzfueQaBBPDEWwXkGSHxWEw9l237hVXQiFE8bQ=,iv:0fAH/OTagWe93TOudWTxLCdLnPnKs87u9InrOH+or90=,tag:0ykeTEYI7WFzq1KLEnlbFQ==,type:str]
          autoDiscoverUrl: https://authentik.vhaudiquet.fr/application/o/gitea/.well-known/openid-configuration
    config:
        APP_NAME: Gitea
        server:
            ROOT_URL: https://git.vhaudiquet.fr
        lfs:
            STORAGE_TYPE: local
            PATH: /git/lfs
        repository:
            ROOT: /git/repo
        database:
            DB_TYPE: postgres
        service:
            ALLOW_ONLY_EXTERNAL_REGISTRATION: true
        actions:
            ENABLED: true
        oauth2_client:
            ENABLE_AUTO_REGISTRATION: true
            ACCOUNT_LINKING: login
        openid:
            ENABLE_OPENID_SIGNIN: false
            ENABLE_OPENID_SIGNUP: false
        indexer:
            ISSUE_INDEXER_TYPE: bleve
            REPO_INDEXER_ENABLED: true
sops:
    lastmodified: "2026-06-05T20:03:49Z"
    mac: ENC[AES256_GCM,data:LDq7fxXRZ3qzsdJHFaJ+2eweWewA6z6b41jJJ8WQ9l+lF7p2iYq2j0zcujHahXXH47pj59gJF62hwbM6Dgr+QIh+UzQKAKOuhiPRcs45F6oYgUqLYPVUnIs1hNtZX26tw/CmSlHWRQHG8CEGqV6flf8y59YaR7+UwOv3MPkTa4Q=,iv:/xr65RBgW2oUh4YZ9hEBNCDC3ZRUHA+w9UVhU1ABrgo=,tag:WCXzoDC5ZCLqA3j2r11VMQ==,type:str]
    pgp:
        - created_at: "2026-06-05T20:03:49Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiAQ/5AS+lddVQx1QbvL69B2k0HgriwcmXlJI5M6XjqdjEK4jl
            eg/IXqBwPsqptOfUq6zQS9ZoYdxWdZQ89X/yQVO3k9gTPH4Gz1xeOoJBn6rGdo5b
            6yimtGWAsBEyzu6fJjIp0WsKOejFk64T+dnsXdFL63bXkC35Pg/9G3lH9R+ZtvgG
            LdlBPEVe7kHEEFrfWaL6aZzmbmx9rslO4MhmaYIgfVhFil60V9g/azp2TQM3oZVX
            slEHTUziXGSnV89VnGkYp5hiqTvzwlrTs/iWvwc2FcpGzAZM4OYJqMfu8Gt1K+8s
            niFfrg9npOpu3OJJ66ukMtM3j8FHuhjo+PUmNk49AXPnWo8WN1B0hzWjVZ0rQQvG
            mZq2plbEsAWh5BFqN6o7hmezYbaQ8vlJS42Q1WIudNlDsEvPTrLg/Q0Hlj5HlgHd
            uQQN2HhZPtQOYeUszPDg6R6RMoVzdZ+0B6Bi/wAXnNuOoxCxyTSziPAVz1gyOdxb
            UPWIspb6G3zrhdpXj1Hzgt4s7CJ55eseYd3JTcNZTEAc3tTfhrQ9V6VpLGArHbgV
            HsYNkmvIc2EM0buolKcixrVxV4rDB05iKZkMxVDmTr8yjEVRTXIC3T/7cCiFG+S/
            Nt4juC/mRj7Qgm1paZTnlU41ps+Y/MGx3EWYgH8VZbgyGXynpW/2JNpYaeFv1KzS
            XAGaCjhEe3WYbwe9WoIdinUWla5GjQkzvZCk6huf1iLg4RzwwGQhNu5do1IIoQjB
            QXmhuReaKiBi6UQgsNy8QbdaWJraT4U8iYlGJ/ma382dD9zRiPi2WDt4aY0N
            =IFXW
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.2