Stuff

debian12-forgejo/playbook.yml

@@ -6,6 +6,7 @@
     forgejo: 1.20.2-0
     domain: git2.keks.cloud
     sslmail: admin@keks.cloud
+    mariadbpassword: "FBnA!wiEJ!W&GTy@!Tf3$aV&WLvPD628GM%9&JUtssr3hr"
   handlers:
   - name: Restart forgejo
     ansible.builtin.service:
@@ -24,6 +25,7 @@
       - nginx
       - certbot
       - python3-certbot-nginx
+      - git
       
   - name: Add the user 'git'
     ansible.builtin.user:
@@ -133,7 +135,7 @@
   - name: Create database user forgejo
     community.mysql.mysql_user:
       name: forgejo
-      password: "FBnA!wiEJ!W&GTy@!Tf3$aV&WLvPD628GM%9&JUtssr3hr"
+      password: "{{ mariadbpassword }}"
       priv: 'forgejo.*:ALL'
       state: present
       login_unix_socket: /run/mysqld/mysqld.sock

debian12-forgejo/templates/app.ini

@@ -0,0 +1,82 @@
+APP_NAME = Forgejo: Beyond coding. We Forge.
+RUN_USER = git
+WORK_PATH = /var/lib/forgejo
+RUN_MODE = prod
+
+[database]
+DB_TYPE = mysql
+HOST = 127.0.0.1:3306
+NAME = forgejo
+USER = forgejo
+PASSWD = "{{ mariadbpassword }}"
+SCHEMA = 
+SSL_MODE = disable
+PATH = /var/lib/forgejo/data/forgejo.db
+LOG_SQL = false
+
+[repository]
+ROOT = /var/lib/forgejo/data/forgejo-repositories
+
+[server]
+SSH_DOMAIN = {{ domain }}
+DOMAIN = {{ domain }}
+HTTP_PORT = 3000
+ROOT_URL = https://{{ domain }}/
+APP_DATA_PATH = /var/lib/forgejo/data
+DISABLE_SSH = false
+SSH_PORT = 22
+LFS_START_SERVER = true
+LFS_JWT_SECRET = 4SBbmKES622K_FEs0exmXkp8H6PSWWsD0UPn-OJIoWg
+OFFLINE_MODE = false
+
+[lfs]
+PATH = /var/lib/forgejo/data/lfs
+
+[mailer]
+ENABLED = true
+SMTP_ADDR = {{ smtp_host }}
+SMTP_PORT = {{ smtp_port }}
+FROM = {{ smtp_sender }}
+USER = {{ smtp_user }}
+PASSWD = {{ smtp_pass }}
+
+[service]
+REGISTER_EMAIL_CONFIRM = true
+ENABLE_NOTIFY_MAIL = true
+DISABLE_REGISTRATION = false
+ALLOW_ONLY_EXTERNAL_REGISTRATION = false
+ENABLE_CAPTCHA = true
+REQUIRE_SIGNIN_VIEW = false
+DEFAULT_KEEP_EMAIL_PRIVATE = false
+DEFAULT_ALLOW_CREATE_ORGANIZATION = true
+DEFAULT_ENABLE_TIMETRACKING = true
+NO_REPLY_ADDRESS = noreply.localhost
+
+[openid]
+ENABLE_OPENID_SIGNIN = false
+ENABLE_OPENID_SIGNUP = false
+
+[cron.update_checker]
+ENABLED = false
+
+[session]
+PROVIDER = file
+
+[log]
+MODE = console
+LEVEL = info
+ROOT_PATH = /var/lib/forgejo/log
+
+[repository.pull-request]
+DEFAULT_MERGE_STYLE = merge
+
+[repository.signing]
+DEFAULT_TRUST_MODEL = committer
+
+[security]
+INSTALL_LOCK = true
+INTERNAL_TOKEN = eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE2OTEyNjI0NDF9.WCB__N-KWeKkFIIdXgkb1kvyTUiMpJf1Xg_gFdyECwo
+PASSWORD_HASH_ALGO = pbkdf2_hi
+
+[oauth2]
+JWT_SECRET = 8JsIl_rjBJcp17GyRnc2vQmMmWzqScyHhJ39VnOkEKo