Adyrem
7ba749c620
Ansible Lint / lint (push) Successful in 4s
Proxmox host role: - Admin user setup, SSH hardening (port 2222, no root login) - claude-code SFTP chroot user - Unattended upgrades, DuckDNS dynamic DNS updater (vault-encrypted token) - WireGuard VPN server (10.10.10.0/24) with Fedora client registered - Proxmox firewall management via pvesh API (idempotent Python script) Public Gitea exposure: - Traefik: add HTTPS entrypoint, Let's Encrypt ACME (HTTP-01), StripPrefix middleware for /git subpath, HTTP→HTTPS redirect - Gitea ROOT_URL updated to https://adyrem.duckdns.org/git/ - Pi-hole split DNS: adyrem.duckdns.org → 10.10.1.3 for internal hairpin bypass SSH config fixes: - StrictHostKeyChecking no → accept-new across all hosts - Proxmox jump host: port 2222, user adyrem (root login disabled) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
54 lines
1.0 KiB
Django/Jinja
54 lines
1.0 KiB
Django/Jinja
[DEFAULT]
|
|
RUN_USER = gitea
|
|
RUN_MODE = prod
|
|
|
|
[server]
|
|
DOMAIN = {{ gitea_domain }}
|
|
HTTP_ADDR = 0.0.0.0
|
|
HTTP_PORT = {{ gitea_http_port }}
|
|
ROOT_URL = {{ gitea_root_url }}
|
|
SSH_DOMAIN = {{ gitea_domain }}
|
|
SSH_PORT = 22
|
|
START_SSH_SERVER = false
|
|
DISABLE_SSH = false
|
|
|
|
[database]
|
|
DB_TYPE = postgres
|
|
HOST = 127.0.0.1:5432
|
|
NAME = {{ gitea_db_name }}
|
|
USER = {{ gitea_db_user }}
|
|
PASSWD = {{ gitea_db_password }}
|
|
SSL_MODE = disable
|
|
|
|
[repository]
|
|
ROOT = /var/lib/gitea/data/repositories
|
|
|
|
[security]
|
|
SECRET_KEY = {{ gitea_secret_key }}
|
|
INTERNAL_TOKEN = {{ gitea_internal_token }}
|
|
INSTALL_LOCK = true
|
|
PASSWORD_HASH_ALGO = argon2
|
|
|
|
[service]
|
|
DISABLE_REGISTRATION = false
|
|
REQUIRE_SIGNIN_VIEW = false
|
|
DEFAULT_KEEP_EMAIL_PRIVATE = true
|
|
|
|
[log]
|
|
MODE = console
|
|
LEVEL = info
|
|
ROOT_PATH = /var/log/gitea
|
|
|
|
[session]
|
|
PROVIDER = db
|
|
|
|
[cache]
|
|
ADAPTER = memory
|
|
|
|
[actions]
|
|
ENABLED = true
|
|
|
|
[indexer]
|
|
ISSUE_INDEXER_TYPE = bleve
|
|
REPO_INDEXER_ENABLED = true
|