127 lines
2.9 KiB
YAML
127 lines
2.9 KiB
YAML
apiVersion: source.toolkit.fluxcd.io/v1
|
|
kind: HelmRepository
|
|
metadata:
|
|
name: gitea-repository
|
|
spec:
|
|
interval: "24h"
|
|
url: https://dl.gitea.com/charts/
|
|
---
|
|
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: gitea-release
|
|
spec:
|
|
interval: "24h"
|
|
chart:
|
|
spec:
|
|
chart: gitea
|
|
version: "12.7.0"
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: gitea-repository
|
|
interval: "1h"
|
|
dependsOn:
|
|
- name: cnpg
|
|
namespace: cnpg-system
|
|
- name: external-secrets
|
|
namespace: external-secrets
|
|
- name: longhorn
|
|
namespace: longhorn-system
|
|
- name: tailscale
|
|
namespace: tailscale
|
|
values:
|
|
# Gitea Helm Chart Values https://gitea.com/gitea/helm-gitea
|
|
global:
|
|
storageClass: longhorn-default
|
|
|
|
image:
|
|
tag: "1.27.1"
|
|
|
|
replicaCount: 1
|
|
|
|
service:
|
|
http:
|
|
type: LoadBalancer
|
|
port: 3000
|
|
ssh:
|
|
type: LoadBalancer
|
|
port: 32222
|
|
nodePort: 32222
|
|
|
|
gitea:
|
|
admin:
|
|
# If I ever need or want to reset the password, I can use this
|
|
# existingSecret: gitea-admin-secret
|
|
# passwordMode: keepUpdated
|
|
username: greg
|
|
password: changeMe1
|
|
passwordMode: initialOnlyRequireReset
|
|
|
|
# Reference: https://docs.gitea.com/administration/config-cheat-sheet
|
|
additionalConfigSources:
|
|
- secret:
|
|
secretName: gitea-config
|
|
config:
|
|
DEFAULT:
|
|
APP_NAME: "Gitea: Greg's Cup of Git"
|
|
RUN_MODE: dev
|
|
server:
|
|
DOMAIN: "shire-zebra.ts.net"
|
|
ROOT_URL: "https://gitea.shire-zebra.ts.net"
|
|
SSH_PORT: "2222"
|
|
database:
|
|
DB_TYPE: postgres
|
|
HOST: "postgres-rw:5432"
|
|
NAME: gitea
|
|
# USER: ""
|
|
# PASSWD: ""
|
|
session:
|
|
PROVIDER: db
|
|
queue:
|
|
TYPE: level
|
|
repository:
|
|
ENABLE_PUSH_CREATE_USER: "true"
|
|
service:
|
|
DISABLE_REGISTRATION: "true"
|
|
storage:
|
|
STORAGE_TYPE: minio
|
|
MINIO_ENDPOINT: "nas1.shire-zebra.ts.net:30188"
|
|
MINIO_BUCKET: gitea
|
|
MINIO_LOCATION: garage
|
|
# MINIO_ACCESS_KEY_ID: ""
|
|
# MINIO_SECRET_ACCESS_KEY: ""
|
|
MINIO_USE_SSL: "false"
|
|
MINIO_INSECURE_SKIP_VERIFY: "true"
|
|
security:
|
|
ALLOWED_HOST_LIST: loopback,private,*.shire-zebra.ts.net,*.nebula.thehellings.com,*.thehellings.lan
|
|
|
|
metrics:
|
|
enabled: false
|
|
serviceMonitor:
|
|
enabled: false
|
|
|
|
persistence:
|
|
enabled: true
|
|
create: false
|
|
claimName: gitea-new
|
|
|
|
# I will manage my Postgres externally
|
|
postgresql:
|
|
enabled: false
|
|
postgresql-ha:
|
|
enabled: false
|
|
|
|
resources:
|
|
limits:
|
|
cpu: "1000m"
|
|
memory: "6Gi"
|
|
requests:
|
|
cpu: "100m"
|
|
memory: "2Gi"
|
|
|
|
strategy:
|
|
type: RollingUpdate
|
|
rollingUpdate:
|
|
maxSurge: 1
|
|
maxUnavailable: 0
|