ingress:
    enabled: true
    hosts:
        - host: git.vhaudiquet.fr
          paths:
            - path: /
              pathType: Prefix
# Disable HA, we are on a 1-node cluster
redis-cluster:
    enabled: false
redis:
    enabled: true
postgresql:
    enabled: true
    global:
        postgresql:
            auth:
                postgressPassword: ENC[AES256_GCM,data:qnGG3lJNNWm63Q==,iv:hoj+b/UZN4jfRom1eTncFZbXuGWrBNrKXcq67iR9Pa0=,tag:N3/gpnTvHPcG55h0T1HZOg==,type:str]
                password: ENC[AES256_GCM,data:dG6zxvXuLt5dOw==,iv:GPY7tNd31n/oKZzz+OOwLKJgCpB0X1Dm4Z9XzbEGPOM=,tag:d8Kh5bML7Vrwm51qpTPobA==,type:str]
                database: gitea
                username: ENC[AES256_GCM,data:XrERGEk=,iv:5y6G+0+d9ITSFn2aCR4lbcftvVVu1DRYUb4iGT76Ytk=,tag:SVFgHtyCw4nvEL4GoiAMsQ==,type:str]
    volumePermissions:
        enabled: true
postgresql-ha:
    enabled: false
persistence:
    enabled: true
    subPath: data
extraVolumes:
    - name: git
      nfs:
        server: truenas.local
        path: /mnt/main_storage/git
extraContainerVolumeMounts:
    - name: git
      mountPath: /git
clusterDomain: kube-talos.local
actions:
    enabled: true
    provisioning:
        enabled: true
gitea:
    oauth:
        - name: Authentik
          provider: openidConnect
          key: ENC[AES256_GCM,data:30dcTGzkToP5DqFcJ/az7DSXngPi/g3+scezR8vrVgZNS9hFTie2lA==,iv:pXNyER7mS8QLL5RbAAW47GK8qIGs18r1llLVyOAVXW4=,tag:eMshhtuZILS38OVf+YaMLA==,type:str]
          secret: ENC[AES256_GCM,data:o5iwlDHGHMPVI+CpT0/2w9czOw3If/Nd+ef2PJmUgV2sFdIlRyFVsoj4NptllaBQveO8rtlm8celszU3FMiFAicLcqOXHyUo0h7nFIuHK7T15YculBKencN8BEhyjISLmx9+x3tQkhi3j3ybPCHwyb/dM5olo4JZxsIpdyVJ250=,iv:o79oFFQyw+9Y5RNVGlMyP+T394JRz9iua93sRPAG7vQ=,tag:r0Ar/aryuH7i0WMXFabQ4A==,type:str]
          autoDiscoverUrl: https://authentik.vhaudiquet.fr/application/o/gitea/.well-known/openid-configuration
    config:
        APP_NAME: Gitea
        server:
            ROOT_URL: https://git.vhaudiquet.fr
        lfs:
            STORAGE_TYPE: local
            PATH: /git/lfs
        repository:
            ROOT: /git/repo
        database:
            DB_TYPE: postgres
        service:
            ALLOW_ONLY_EXTERNAL_REGISTRATION: true
        actions:
            ENABLED: true
        oauth2_client:
            ENABLE_AUTO_REGISTRATION: true
            ACCOUNT_LINKING: login
        openid:
            ENABLE_OPENID_SIGNIN: false
            ENABLE_OPENID_SIGNUP: false
        indexer:
            ISSUE_INDEXER_TYPE: bleve
            REPO_INDEXER_ENABLED: true
sops:
    lastmodified: "2025-04-28T15:45:56Z"
    mac: ENC[AES256_GCM,data:TkAJ2yvoHRuSZwDGkqHF4i26c2YGDV69PXQN7Rt/UVkslINbzLS2qmwQwh67LEK7ouXuuJNB+Otxf+XYXe2GSxWuEbv70ccmzG3+hZL5I3DIu0u0mr9fs48QKaCkFtLdQfj7K2J25DQQ/Iy58xMcFmuBiJqoueYhacqriI2n5sM=,iv:KkhNnzqahJn9x0I0z8YVpt42kpcXpHx9YpQpUwWQaok=,tag:rv+ClowbiP/VZvgVDdGQxg==,type:str]
    pgp:
        - created_at: "2025-04-28T15:45:56Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiARAArCe0shr8TtAInbzwQuk82XDIU7O8WZ0eYe9iynTPaZUy
            ShMJmZZ1cG6n5q06vCUA/xTDheuYdKTO4u794sR532lb8beet0uSr3xQkQrJRFTc
            80P9IuLczSy9BenX+pCpZmR7ZNj4XM8Zup8ULSWwj0AETgh3A+3bm2WR2cb/Fypm
            ELEPXA/6g+B/lyUwiVDhH0y45ExhLpOdPhMqjSU/8FvjT7UyxMqY+2c5ffK0uNEN
            Cw+b7rcNfoc37YvDTMprN2OZYmsvvJYP9bC7O+oK+BRc2j4Dd5ZeZmUD7pYxHusR
            XYiL9En5g8kYZiAL8OqVuLNCIwq8RAmTkwrkU6blrcLUDLoNeePReFMKAdMOtNdF
            4IMhlzRnW5zTbUspb5b5I7Hg9+K2ZitJJyV0nBpgCeIh+qr/ljvPg9CDuHbzYxiY
            xx1wBfryHTlTTu0o9CcziEqP/ULKmN79eTycNl8XjGl0YwaoCyGn3Co2Xr4jA/+x
            6hmXWJIgn21pB6Waxau+8Hxhpe7EJRNvIzlhilex4vN9a2F3g8sc+mc2hRGCX7U7
            yPWS3NZfw47Fw7hk4+UItkKCNZoTgXy62p0yHUyxHbL8xD6iikHsMcygrVgfLvlz
            LQLIlA63H1hGtiWY7nur8l/D2ioFCiQBfdotLX1TT3dCPQHgpk3PSQ3RTSb5g2fU
            aAEJAhD7EZUl/kCuhp7eyPIeat+KX83wEpmNOt3qq9L2bA9Pphx1OwJzA0wldJ40
            1jtG1MJ1QYIU/SHSukAb4vfkP/ahMcTMAuDcln+V0ctJC/+p2ZWU8OkSCYE+6QDR
            4z9iQvf7PQ3G
            =HYID
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|ssh-key|api-key|user|username|privateKey|apiKey|extraArgs.*|extraEnvVars|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.1