From 685328685be8eef8303dce1ef0eb04ac4c4c5c0d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Moritz=20J=C3=B6rg?= <moritz.jorg@oceanbox.io>
Date: Fri, 9 Jan 2026 14:28:16 +0100
Subject: [PATCH] fix(forgejo): Use secrets for DB

---
 values/forgejo/values/values.yaml | 35 +++++++++++++++++++++++++------
 1 file changed, 29 insertions(+), 6 deletions(-)

diff --git a/values/forgejo/values/values.yaml b/values/forgejo/values/values.yaml
index 81d65961..4c63ea4d 100644
--- a/values/forgejo/values/values.yaml
+++ b/values/forgejo/values/values.yaml
@@ -15,12 +15,12 @@ resources:
 
 gitea:
   config:
-    database:
-      DB_TYPE: postgres
-      HOST: forgejo-db-rw:5432
-      NAME: app
-      USER: app
-      SCHEMA: public
+    # database:
+    #   DB_TYPE: postgres
+    #   HOST: forgejo-db-rw:5432
+    #   NAME: app
+    #   USER: app
+    #   SCHEMA: public
     cache:
       ENABLED: true
       ADAPTER: redis
@@ -38,6 +38,29 @@ gitea:
     server:
       DOMAIN: git.svc.hel1.obx
       ROOT_URL: https://git.svc.hel1.obx
+  additionalConfigFromEnvs:
+    - name: FORGEJO__DATABASE__PASSWD
+      valueFrom:
+        secretKeyRef:
+          name: forgejo-db-app
+          key: password
+    - name: FORGEJO__DATABASE__NAME
+      valueFrom:
+        secretKeyRef:
+          name: forgejo-db-app
+          key: dbname
+    - name: FORGEJO__DATABASE__USER
+      valueFrom:
+        secretKeyRef:
+          name: forgejo-db-app
+          key: user
+    - name: FORGEJO__DATABASE__HOST
+      valueFrom:
+        secretKeyRef:
+          name: forgejo-db-app
+          key: host
+    - name: FORGEJO__DATABASE__DB_TYPE
+      value: postgres
 
 ingress:
   enabled: true