From 941e98abb86e5d4d4bef0336fd61227827e10172 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Moritz=20J=C3=B6rg?= <moritz.jorg@oceanbox.io>
Date: Fri, 23 Jan 2026 19:42:51 +0100
Subject: [PATCH] fix(gitea): Add push to create and lb

---
 values/gitea/values/values.yaml | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/values/gitea/values/values.yaml b/values/gitea/values/values.yaml
index a470e501..e4276d01 100644
--- a/values/gitea/values/values.yaml
+++ b/values/gitea/values/values.yaml
@@ -63,6 +63,15 @@ gitea:
       ENABLE_AUTO_REGISTRATION: true
       UPDATE_AVATAR: true
       ACCOUNT_LINKING: auto
+    # NOTE: THIS IS IMPOSSIBLE
+    # mailer:
+      # ENABLED: true
+      # FROM: "noreply@oceanbox.io"
+      # PROTOCOL: "smtp+startls"
+      # SMTP_ADDR: "smtp.office365.com"
+      # SMTP_PORT: 587
+      # USER: "noreply@oceanbox.io"
+      # PASSWD:
     database:
       DB_TYPE: postgres
       MAX_OPEN_CONNS: 90
@@ -111,6 +120,14 @@ gitea:
           key: host
     - name: GITEA__DATABASE__DB_TYPE
       value: postgres
+    - name: GITEA__repository__DEFAULT_PRIVATE
+      value: "true"
+    - name: GITEA__repository__DEFAULT_PUSH_CREATE_PRIVATE
+      value: "true"
+    - name: GITEA__repository__ENABLE_PUSH_CREATE_USER
+      value: "true"
+    - name: GITEA__repository__ENABLE_PUSH_CREATE_ORG
+      value: "true"
 
 ingress:
   enabled: true
@@ -143,6 +160,20 @@ service:
     type: NodePort
     nodePort: 30022
     port: 22
+    annotations:
+      load-balancer.hetzner.cloud/location: hel1
+      load-balancer.hetzner.cloud/name: load-balancer-2
+      load-balancer.hetzner.cloud/disable-public-network: "true"
+      load-balancer.hetzner.cloud/use-private-ip: "true"
+      load-balancer.hetzner.cloud/uses-proxyprotocol: "true"
+
+defaultPodOptions:
+  securityContext:
+    runAsUser: 1000
+    runAsGroup: 1000
+    runAsNonRoot: true
+    fsGroup: 1000
+    fsGroupChangePolicy: "Always"
 
 postgresql-ha:
   enabled: false