ingress:
    enabled: true
    hosts:
        - host: git.vhaudiquet.fr
          paths:
            - path: /
              pathType: Prefix
# Disable HA, we are on a 1-node cluster
redis-cluster:
    enabled: false
redis:
    enabled: true
postgresql:
    enabled: true
    global:
        postgresql:
            auth:
                postgressPassword: ENC[AES256_GCM,data:cipL6pH2kJm5TA==,iv:Rwb04Ik7RYfSQof9Svi0n7gmWfvXU40PBri5mrUNSCM=,tag:yZzpbSCc94PijgxkOtH7KQ==,type:str]
                password: ENC[AES256_GCM,data:k+Ku9B0glWI+xw==,iv:TIWNwet0LKd/mNvKPcVrzKfI04sjGPPvHnWoF/uScMI=,tag:gRK68cH/MXH/+1xVojoHdQ==,type:str]
                database: gitea
                username: ENC[AES256_GCM,data:m2LQ0Zk=,iv:L9UcOpQXoxWCgu7qd0d/55P6EZsPsWpJcjLC5Z7C7Qo=,tag:6YxXyWFC8Hs4w027ENeXEw==,type:str]
    volumePermissions:
        enabled: true
postgresql-ha:
    enabled: false
persistence:
    enabled: true
    subPath: data
extraVolumes:
    - name: git
      nfs:
        server: truenas.local
        path: /mnt/main_storage/git
extraContainerVolumeMounts:
    - name: git
      mountPath: /git
clusterDomain: kube-talos.local
gitea:
    oauth:
        - name: Authentik
          provider: openidConnect
          key: ENC[AES256_GCM,data:ROxM1KEuIaDiJ6rRzj6JLsITyG3GCw7jJno70PrAECwmyD7Yt0098A==,iv:WtTM2JHFx6ctejWdGPmWlxS9ZXdLliG48iJrmaDBExQ=,tag:WJPp0Ekl8bG3wA12xprO/A==,type:str]
          secret: ENC[AES256_GCM,data:u26ggddh1VOlilfff/QEH67z6PH+DaL88NmDeNUyf8bYP03WEni5pEGE+I3l9Mk4kmMbWHeY8Xdd9DKMs/HIgwtyycpv6GBukVtznPo3CmAVisZygZB6mtC+m5dgicBuJd/k6YDlQTyMtSNrR/pnB/DypU1RJFjoALS0chR4lYw=,iv:wp7Y/JzK06Zy8W8mrG3Aw+X5s1TJlgQDd80uF3Qi1lw=,tag:AbHe53Z/9mVHmoqgCkqbiQ==,type:str]
          autoDiscoverUrl: https://authentik.vhaudiquet.fr/application/o/gitea/.well-known/openid-configuration
    config:
        APP_NAME: Gitea
        server:
            ROOT_URL: https://git.vhaudiquet.fr
        lfs:
            STORAGE_TYPE: local
            PATH: /git/lfs
        repository:
            ROOT: /git/repo
        database:
            DB_TYPE: postgres
        service:
            ALLOW_ONLY_EXTERNAL_REGISTRATION: true
        oauth2_client:
            ENABLE_AUTO_REGISTRATION: true
            ACCOUNT_LINKING: login
        openid:
            ENABLE_OPENID_SIGNIN: false
            ENABLE_OPENID_SIGNUP: false
        indexer:
            ISSUE_INDEXER_TYPE: bleve
            REPO_INDEXER_ENABLED: true
sops:
    lastmodified: "2025-04-14T16:22:52Z"
    mac: ENC[AES256_GCM,data:OnenhWOT2SEm9BQ+DC6hneWyfNsYPDchjCDXu9EM1o9qi6Mk8FZ+bYEFBnrae1I6V2kl954ziOcEYKKJqGZbiqNqSOE6xeZE9H0EMOSLvN0ziDdVkawlEUG4/n4nJGb3C3vvTNqjfViOtRjwrvu7UqHYbN8AoUxLnfCIR++nbcs=,iv:S/VPuBVVQvMsuNzqLe8axbTboVnLKCxO5H/orQRjP10=,tag:V8vqmeLFfis3NMFfd2cmKQ==,type:str]
    pgp:
        - created_at: "2025-04-14T16:22:52Z"
          enc: |-
            -----BEGIN PGP MESSAGE-----

            hQIMA7uy4qQr71wiAQ/9EI3ob+Tx0TPR3D14dpbho262C7l8m8qCqTWMqYYXFcLj
            pmCZBM/ZjTFHKwQuQHTRL0igq4+qLBwnCQ7gLyfGZGr6m9XsPooavVFKIikfabLf
            ax5qz97wo8DjZ7slYwOUcbmGb4Mre8LXkOmN66UM54jf7waHmHUnGmW05+9XJ39Q
            ovaC+/T9CR3SVBnTPK4i+PvTz/teRMmomWADjDLX8JcOR/BCyfRCkl51NoBBihzj
            Qc1sGVp26AIvqz9iOLFbLP0GJgyNbtOBiXyCRgOvdWGauECIz1oladtRXY5sXo81
            CWkEgVnbmpCtn8GlQSwCZFpmylnaOQ6mscExh4/UragV9OYGpHk/XxtkP0AfEW1D
            JR9GN8BKigL/Meza/99taCdVLn5ClBLL+lhRYRxrV6uk2K6sYb6gSRT3SdKznyAX
            iMJLFYAcoF9yIC9K+9Dp6TbWn0d4wWaSrCpftf4wjouhG6tPQmD1unHH6iy2NvqH
            qpQo9pWsiVr4eCJ5nO0QrnTY8TfqFYuBSXL4PNOcMrE4zLlRUhRvQX4e8A1aCGOC
            jNaKrbZ0xceEFxShii3TxlvsY8LjXiAZXnnkvRwJGDpr+LtXszHR/YRGgUNCp9KL
            zDOouFtKnnWNRRkExCbPukSv9HDfvSLb7pKIFJXzAQgZrYnch+UChbmolwm5bwnU
            ZgEJAhC1002Yh/RxwWXzGdrgWN4fVEVLZMmiAtitXUQrjpIlaVCa8xiJzSEQtjVT
            4BlTfUvQ0JpMpzvFu0/WUrpYGtLIklasZJsKm498eJRxOqTjGyzIJEfwZF1yT0nl
            WYrfBGYqpg==
            =7ooc
            -----END PGP MESSAGE-----
          fp: DC6910268E657FF70BA7EC289974494E76938DDC
    encrypted_regex: ^(password|ssh-key|api-key|user|username|privateKey|apiKey|extraArgs.*|extraEnvVars|.*secret.*|key|.*Password|.*\.ya?ml)$
    version: 3.10.1