Files
homeprod/kubernetes/code/gitea/values.yaml

94 lines
4.1 KiB
YAML

ingress:
enabled: true
hosts:
- host: git.vhaudiquet.fr
paths:
- path: /
pathType: Prefix
# Disable HA, we are on a 1-node cluster
redis-cluster:
enabled: false
redis:
enabled: true
postgresql:
enabled: true
global:
postgresql:
auth:
postgressPassword: ENC[AES256_GCM,data:cipL6pH2kJm5TA==,iv:Rwb04Ik7RYfSQof9Svi0n7gmWfvXU40PBri5mrUNSCM=,tag:yZzpbSCc94PijgxkOtH7KQ==,type:str]
password: ENC[AES256_GCM,data:k+Ku9B0glWI+xw==,iv:TIWNwet0LKd/mNvKPcVrzKfI04sjGPPvHnWoF/uScMI=,tag:gRK68cH/MXH/+1xVojoHdQ==,type:str]
database: gitea
username: ENC[AES256_GCM,data:m2LQ0Zk=,iv:L9UcOpQXoxWCgu7qd0d/55P6EZsPsWpJcjLC5Z7C7Qo=,tag:6YxXyWFC8Hs4w027ENeXEw==,type:str]
volumePermissions:
enabled: true
postgresql-ha:
enabled: false
persistence:
enabled: true
subPath: data
extraVolumes:
- name: git
nfs:
server: truenas.local
path: /mnt/main_storage/git
extraContainerVolumeMounts:
- name: git
mountPath: /git
clusterDomain: kube-talos.local
gitea:
oauth:
- name: Authentik
provider: openidConnect
key: ENC[AES256_GCM,data:ROxM1KEuIaDiJ6rRzj6JLsITyG3GCw7jJno70PrAECwmyD7Yt0098A==,iv:WtTM2JHFx6ctejWdGPmWlxS9ZXdLliG48iJrmaDBExQ=,tag:WJPp0Ekl8bG3wA12xprO/A==,type:str]
secret: ENC[AES256_GCM,data:u26ggddh1VOlilfff/QEH67z6PH+DaL88NmDeNUyf8bYP03WEni5pEGE+I3l9Mk4kmMbWHeY8Xdd9DKMs/HIgwtyycpv6GBukVtznPo3CmAVisZygZB6mtC+m5dgicBuJd/k6YDlQTyMtSNrR/pnB/DypU1RJFjoALS0chR4lYw=,iv:wp7Y/JzK06Zy8W8mrG3Aw+X5s1TJlgQDd80uF3Qi1lw=,tag:AbHe53Z/9mVHmoqgCkqbiQ==,type:str]
autoDiscoverUrl: https://authentik.vhaudiquet.fr/application/o/gitea/.well-known/openid-configuration
config:
APP_NAME: Gitea
server:
ROOT_URL: https://git.vhaudiquet.fr
lfs:
STORAGE_TYPE: local
PATH: /git/lfs
repository:
ROOT: /git/repo
database:
DB_TYPE: postgres
service:
ALLOW_ONLY_EXTERNAL_REGISTRATION: true
oauth2_client:
ENABLE_AUTO_REGISTRATION: true
ACCOUNT_LINKING: login
openid:
ENABLE_OPENID_SIGNIN: false
ENABLE_OPENID_SIGNUP: false
indexer:
ISSUE_INDEXER_TYPE: bleve
REPO_INDEXER_ENABLED: true
sops:
lastmodified: "2025-04-14T16:22:52Z"
mac: ENC[AES256_GCM,data:OnenhWOT2SEm9BQ+DC6hneWyfNsYPDchjCDXu9EM1o9qi6Mk8FZ+bYEFBnrae1I6V2kl954ziOcEYKKJqGZbiqNqSOE6xeZE9H0EMOSLvN0ziDdVkawlEUG4/n4nJGb3C3vvTNqjfViOtRjwrvu7UqHYbN8AoUxLnfCIR++nbcs=,iv:S/VPuBVVQvMsuNzqLe8axbTboVnLKCxO5H/orQRjP10=,tag:V8vqmeLFfis3NMFfd2cmKQ==,type:str]
pgp:
- created_at: "2025-04-14T16:22:52Z"
enc: |-
-----BEGIN PGP MESSAGE-----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=7ooc
-----END PGP MESSAGE-----
fp: DC6910268E657FF70BA7EC289974494E76938DDC
encrypted_regex: ^(password|ssh-key|api-key|user|username|privateKey|apiKey|extraArgs.*|extraEnvVars|.*secret.*|key|.*Password|.*\.ya?ml)$
version: 3.10.1