hive-apps/projects/gitea/values/gitea.yaml

159 lines
3.6 KiB
YAML
Raw Normal View History

2021-11-28 10:16:31 +00:00
# Gitea
image:
2022-01-08 16:35:06 +00:00
repository: gitea/gitea
tag: "1.20"
2021-11-28 10:16:31 +00:00
rootless: true
2022-12-13 21:01:06 +00:00
#statefulset:
#env:
# - name: HTTP_PROXY
# value: http://proxy-squid.proxy.svc.cluster.local:3128
# - name: HTTPS_PROXY
# value: http://proxy-squid.proxy.svc.cluster.local:3128
# - name: http_proxy
# value: http://proxy-squid.proxy.svc.cluster.local:3128
# - name: https_proxy
# value: http://proxy-squid.proxy.svc.cluster.local:3128
# - name: NO_PROXY
# value: argocd-server.argocd.svc.cluster.local,10.43.0.0/16
# - name: no_proxy
# value: argocd-server.argocd.svc.cluster.local,10.43.0.0/16
2021-11-28 10:16:31 +00:00
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
# # https://gitea.com/gitea/helm-chart/issues/161
2022-12-13 20:35:35 +00:00
add:
- SYS_CHROOT
2021-11-28 10:16:31 +00:00
privileged: false
readOnlyRootFilesystem: true
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
service:
http:
type: ClusterIP
port: 3000
ssh:
type: LoadBalancer
port: 2222
ingress:
enabled: true
className: ingress-external
2022-01-06 10:17:45 +00:00
labels:
environment: external
2021-11-28 10:16:31 +00:00
annotations:
2023-02-28 07:13:45 +00:00
# kubernetes.io/ingress.class: ingress-external
2021-11-28 10:16:31 +00:00
kubernetes.io/tls-acme: "true"
cert-manager.io/cluster-issuer: letsencrypt
2022-01-05 20:06:12 +00:00
traefik.ingress.kubernetes.io/router.tls: 'true'
2023-02-28 06:54:18 +00:00
external-dns.alpha.kubernetes.io/hostname: git.nold.in
external-dns.alpha.kubernetes.io/target: nold.in
external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
2021-11-28 10:16:31 +00:00
hosts:
- host: git.nold.in
paths:
- path: /
pathType: Prefix
tls:
- secretName: gitea-tls
hosts:
- git.nold.in
resources: {}
# We usually recommend not to specify default resources and to leave this as a conscious
# choice for the user. This also increases chances charts run on environments with little
# resources, such as Minikube. If you do want to specify resources, uncomment the following
# lines, adjust them as necessary, and remove the curly braces after 'resources:'.
# limits:
# cpu: 100m
# memory: 128Mi
# requests:
# cpu: 100m
# memory: 128Mi
persistence:
enabled: true
size: 10Gi
#storageClass: slow
gitea:
admin:
existingSecret: admin
metrics:
enabled: false
serviceMonitor:
enabled: false
# additionalLabels:
# prometheus-release: prom1
2022-01-02 15:37:35 +00:00
oauth: []
2021-11-28 10:16:31 +00:00
#name:
#provider:
#key:
#secret:
#autoDiscoverUrl:
#useCustomUrls:
#customAuthUrl:
#customTokenUrl:
#customProfileUrl:
#customEmailUrl:
config:
APP_NAME: "Git with a lot of coffee"
2022-12-13 20:35:35 +00:00
webhook:
ALLOWED_HOST_LIST: argocd-server.argocd.svc.cluster.local
2021-11-28 10:16:31 +00:00
ui:
DEFAULT_THEME: arc-green
repository:
DEFAULT_BRANCH: main
server:
LFS_START_SERVER: true
PROTOCOL: http
2022-07-20 08:56:02 +00:00
DOMAIN: git.nold.in
ROOT_URL: https://git.nold.in
2021-11-28 10:16:31 +00:00
database:
2022-12-13 20:35:35 +00:00
NAME: app
HOST: gitea-db-rw.gitea.svc.cluster.local:5432
2021-11-28 10:16:31 +00:00
service:
DISABLE_REGISTRATION: true
lfs:
STORAGE_TYPE: local
picture:
DISABLE_GRAVATAR: true
metrics:
ENABLED: false
api:
ENABLE_SWAGGER: false
oauth:
ENABLE: false
2022-12-13 21:01:06 +00:00
proxy:
PROXY_ENABLED: true
PROXY_URL: "http://proxy-squid.proxy.svc.cluster.local:3128"
PROXY_HOSTS: "github.com"
2021-11-28 10:16:31 +00:00
2022-12-13 20:35:35 +00:00
additionalConfigFromEnvs:
- name: ENV_TO_INI__DATABASE__PASSWD
valueFrom:
secretKeyRef:
2023-02-14 20:59:12 +00:00
name: gitea-db-superuser
2022-12-13 20:35:35 +00:00
key: password
- name: ENV_TO_INI__DATABASE__USER
valueFrom:
secretKeyRef:
2023-02-14 20:59:12 +00:00
name: gitea-db-superuser
2022-12-13 20:35:35 +00:00
key: username
2022-01-02 15:37:35 +00:00
memcached:
enabled: true
service:
port: 11211
2021-11-28 10:16:31 +00:00
postgresql:
2022-12-13 20:35:35 +00:00
enabled: false