148 lines
3.7 KiB
YAML
148 lines
3.7 KiB
YAML
replicaCount: 1
|
|
image:
|
|
registry: "docker.gitea.com"
|
|
repository: gitea
|
|
|
|
resources:
|
|
requests:
|
|
cpu: 200m
|
|
memory: 512Mi
|
|
|
|
strategy:
|
|
type: Recreate
|
|
rollingUpdate:
|
|
maxSurge: "100%"
|
|
maxUnavailable: 0
|
|
|
|
gitea:
|
|
metrics:
|
|
enabled: true
|
|
serviceMonitor:
|
|
enabled: true
|
|
config:
|
|
APP_NAME: 'Gitea: With a cup of tea.'
|
|
cache:
|
|
ENABLED: true
|
|
ADAPTER: redis
|
|
HOST: redis://dragonfly-gitea.gitea.svc:6379/0
|
|
ITEM_TTL: "72h" # increased from default 16h
|
|
session:
|
|
PROVIDER: redis
|
|
PROVIDER_CONFIG: redis://dragonfly-gitea.gitea.svc:6379/1
|
|
queue:
|
|
TYPE: redis
|
|
CONN_STR: redis://dragonfly-gitea.gitea.svc:6379/2
|
|
storage:
|
|
STORAGE_TYPE: minio
|
|
MINIO_ENDPOINT: hel1.your-objectstorage.com
|
|
MINIO_USE_SSL: true
|
|
MINIO_LOCATION: hel1
|
|
MINIO_BUCKET: obx-gitea
|
|
security:
|
|
INSTALL_LOCK: true
|
|
service:
|
|
DISABLE_REGISTRATION: false
|
|
server:
|
|
APP_DATA_PATH: "/data/gitea"
|
|
DOMAIN: git.svc.hel1.obx
|
|
ROOT_URL: https://git.svc.hel1.obx
|
|
SSH_DOMAIN: git.svc.hel1.obx
|
|
SSH_PORT: 22
|
|
SSH_SERVER_USE_PROXY_PROTOCOL: true
|
|
LANDING_PAGE: "explore"
|
|
oauth2_client:
|
|
REGISTER_EMAIL_CONFIRM: false;
|
|
ENABLE_AUTO_REGISTRATION: true
|
|
UPDATE_AVATAR: true
|
|
ACCOUNT_LINKING: auto
|
|
database:
|
|
DB_TYPE: postgres
|
|
MAX_OPEN_CONNS: 90
|
|
openid:
|
|
ENABLE_OPENID_SIGNIN: false
|
|
ENABLE_OPENID_SIGNUP: false
|
|
oauth:
|
|
- name: 'Oceanbox'
|
|
provider: 'openidConnect'
|
|
existingSecret: gitea-oauth-oceanbox
|
|
autoDiscoverUrl: 'https://login.microsoftonline.com/3f737008-e9a0-4485-9d27-40329d288089/.well-known/openid-configuration'
|
|
scopes: 'openid profile email groups'
|
|
groupClaimName: 'groups'
|
|
adminGroup: '/oceanbox/devel'
|
|
restrictedGroup: ''
|
|
additionalConfigFromEnvs:
|
|
- name: GITEA__STORAGE__MINIO_ACCESS_KEY_ID
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: gitea-s3
|
|
key: access_key
|
|
- name: GITEA__STORAGE__MINIO_SECRET_ACCESS_KEY
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: gitea-s3
|
|
key: secret_key
|
|
- name: GITEA__DATABASE__PASSWD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: gitea-db-app
|
|
key: password
|
|
- name: GITEA__DATABASE__NAME
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: gitea-db-app
|
|
key: dbname
|
|
- name: GITEA__DATABASE__USER
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: gitea-db-app
|
|
key: user
|
|
- name: GITEA__DATABASE__HOST
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: gitea-db-app
|
|
key: host
|
|
- name: GITEA__DATABASE__DB_TYPE
|
|
value: postgres
|
|
|
|
ingress:
|
|
enabled: true
|
|
className: nginx
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: ca-issuer
|
|
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
|
nginx.ingress.kubernetes.io/proxy-body-size: "0"
|
|
nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
|
|
nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
|
|
nginx.ingress.kubernetes.io/whitelist-source-range: 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,172.19.255.0/24,100.64.0.0/12
|
|
hosts:
|
|
- host: git.svc.hel1.obx
|
|
paths:
|
|
- backend:
|
|
service:
|
|
name: gitea-http
|
|
port:
|
|
number: 3000
|
|
path: /
|
|
pathType: ImplementationSpecific
|
|
tls:
|
|
- secretName: gitea-tls
|
|
hosts:
|
|
- git.svc.hel1.obx
|
|
|
|
# service:
|
|
# ssh:
|
|
# type: LoadBalancer
|
|
# port: 22
|
|
# annotations:
|
|
# load-balancer.hetzner.cloud/location: hel1
|
|
# load-balancer.hetzner.cloud/uses-proxyprotocol: 'false'
|
|
|
|
postgresql-ha:
|
|
enabled: false
|
|
valkey-cluster:
|
|
enabled: false
|
|
|
|
persistence:
|
|
enabled: true
|
|
size: 1Gi
|