fix: migrate rossby manifests to gitea

values/attic/manifests/attic.yaml

@@ -8,9 +8,9 @@ metadata:
 spec:
   destination:
     namespace: attic
-    server: 'https://kubernetes.default.svc'
+    server: "https://kubernetes.default.svc"
   sources:
-  - repoURL: https://gitlab.com/oceanbox/manifests.git
+    - repoURL: https://git.oceanbox.io/oceanbox/manifests.git
       targetRevision: HEAD
       path: values/attic/manifests
   project: aux

values/env-rossby.yaml

@@ -1,5 +1,5 @@
 clusterConfig:
-  manifests: https://gitlab.com/oceanbox/manifests.git
+  manifests: https://git.oceanbox.io/oceanbox/manifests.git
   cilium:
     enabled: false
   env: "prod"

values/gitea/values/values.yaml

@@ -71,8 +71,8 @@ gitea:
     oauth2_client:
       REGISTER_EMAIL_CONFIRM: false
       ENABLE_AUTO_REGISTRATION: true
-      UPDATE_AVATAR: true
+      ACCOUNT_LINKING: "login"
-      ACCOUNT_LINKING: auto
+      USERNAME: "nickname"
     # mailer:
     # ENABLED: true
     # FROM: "noreply@oceanbox.io"
@@ -93,9 +93,6 @@ gitea:
       existingSecret: gitea-oauth-oceanbox
       autoDiscoverUrl: "https://login.microsoftonline.com/3f737008-e9a0-4485-9d27-40329d288089/.well-known/openid-configuration"
       scopes: "openid profile email groups"
-      groupClaimName: "groups"
-      adminGroup: "/oceanbox/devel"
-      restrictedGroup: ""
   additionalConfigFromEnvs:
     - name: GITEA__STORAGE__MINIO_ACCESS_KEY_ID
       valueFrom:
@@ -148,7 +145,7 @@ ingress:
     nginx.ingress.kubernetes.io/proxy-body-size: "0"
     nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
     nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
-    nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,172.19.255.0/24,100.64.0.0/12
+    nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,172.19.255.0/24,100.64.0.0/12,185.125.160.4/32,37.27.203.38/32
   hosts:
     - host: git.oceanbox.io
       paths:

values/headscale/values/values.yaml

@@ -215,7 +215,7 @@ configMaps:
                  "tag:mumindalen:*",
                  "tag:hpc:22,80,443",
                  "dc.tos.net:22,80,443",
-                 "dc.hel1.net:443",
+                 "dc.hel1.net:22,443",
               ]
             },
             {