Files
homeprod/kubernetes/code/gitea/values.yaml

100 lines
4.2 KiB
YAML

ingress:
enabled: true
hosts:
- host: git.vhaudiquet.fr
paths:
- path: /
pathType: Prefix
# Disable HA, we are on a 1-node cluster
redis-cluster:
enabled: false
redis:
enabled: true
postgresql:
enabled: true
global:
postgresql:
auth:
postgressPassword: ENC[AES256_GCM,data:qnGG3lJNNWm63Q==,iv:hoj+b/UZN4jfRom1eTncFZbXuGWrBNrKXcq67iR9Pa0=,tag:N3/gpnTvHPcG55h0T1HZOg==,type:str]
password: ENC[AES256_GCM,data:dG6zxvXuLt5dOw==,iv:GPY7tNd31n/oKZzz+OOwLKJgCpB0X1Dm4Z9XzbEGPOM=,tag:d8Kh5bML7Vrwm51qpTPobA==,type:str]
database: gitea
username: ENC[AES256_GCM,data:XrERGEk=,iv:5y6G+0+d9ITSFn2aCR4lbcftvVVu1DRYUb4iGT76Ytk=,tag:SVFgHtyCw4nvEL4GoiAMsQ==,type:str]
volumePermissions:
enabled: true
postgresql-ha:
enabled: false
persistence:
enabled: true
subPath: data
extraVolumes:
- name: git
nfs:
server: truenas.local
path: /mnt/main_storage/git
extraContainerVolumeMounts:
- name: git
mountPath: /git
clusterDomain: kube-talos.local
actions:
enabled: true
provisioning:
enabled: true
gitea:
oauth:
- name: Authentik
provider: openidConnect
key: ENC[AES256_GCM,data:30dcTGzkToP5DqFcJ/az7DSXngPi/g3+scezR8vrVgZNS9hFTie2lA==,iv:pXNyER7mS8QLL5RbAAW47GK8qIGs18r1llLVyOAVXW4=,tag:eMshhtuZILS38OVf+YaMLA==,type:str]
secret: ENC[AES256_GCM,data:o5iwlDHGHMPVI+CpT0/2w9czOw3If/Nd+ef2PJmUgV2sFdIlRyFVsoj4NptllaBQveO8rtlm8celszU3FMiFAicLcqOXHyUo0h7nFIuHK7T15YculBKencN8BEhyjISLmx9+x3tQkhi3j3ybPCHwyb/dM5olo4JZxsIpdyVJ250=,iv:o79oFFQyw+9Y5RNVGlMyP+T394JRz9iua93sRPAG7vQ=,tag:r0Ar/aryuH7i0WMXFabQ4A==,type:str]
autoDiscoverUrl: https://authentik.vhaudiquet.fr/application/o/gitea/.well-known/openid-configuration
config:
APP_NAME: Gitea
server:
ROOT_URL: https://git.vhaudiquet.fr
lfs:
STORAGE_TYPE: local
PATH: /git/lfs
repository:
ROOT: /git/repo
database:
DB_TYPE: postgres
service:
ALLOW_ONLY_EXTERNAL_REGISTRATION: true
actions:
ENABLED: true
oauth2_client:
ENABLE_AUTO_REGISTRATION: true
ACCOUNT_LINKING: login
openid:
ENABLE_OPENID_SIGNIN: false
ENABLE_OPENID_SIGNUP: false
indexer:
ISSUE_INDEXER_TYPE: bleve
REPO_INDEXER_ENABLED: true
sops:
lastmodified: "2025-04-28T15:45:56Z"
mac: ENC[AES256_GCM,data:TkAJ2yvoHRuSZwDGkqHF4i26c2YGDV69PXQN7Rt/UVkslINbzLS2qmwQwh67LEK7ouXuuJNB+Otxf+XYXe2GSxWuEbv70ccmzG3+hZL5I3DIu0u0mr9fs48QKaCkFtLdQfj7K2J25DQQ/Iy58xMcFmuBiJqoueYhacqriI2n5sM=,iv:KkhNnzqahJn9x0I0z8YVpt42kpcXpHx9YpQpUwWQaok=,tag:rv+ClowbiP/VZvgVDdGQxg==,type:str]
pgp:
- created_at: "2025-04-28T15:45:56Z"
enc: |-
-----BEGIN PGP MESSAGE-----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=HYID
-----END PGP MESSAGE-----
fp: DC6910268E657FF70BA7EC289974494E76938DDC
encrypted_regex: ^(password|ssh-key|api-key|user|username|privateKey|apiKey|extraArgs.*|extraEnvVars|.*secret.*|key|.*Password|.*\.ya?ml)$
version: 3.10.1