# Gitea image: repository: gitea/gitea tag: "1.18" rootless: true #statefulset: #env: # - name: HTTP_PROXY # value: http://proxy-squid.proxy.svc.cluster.local:3128 # - name: HTTPS_PROXY # value: http://proxy-squid.proxy.svc.cluster.local:3128 # - name: http_proxy # value: http://proxy-squid.proxy.svc.cluster.local:3128 # - name: https_proxy # value: http://proxy-squid.proxy.svc.cluster.local:3128 # - name: NO_PROXY # value: argocd-server.argocd.svc.cluster.local,10.43.0.0/16 # - name: no_proxy # value: argocd-server.argocd.svc.cluster.local,10.43.0.0/16 securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL # # https://gitea.com/gitea/helm-chart/issues/161 add: - SYS_CHROOT privileged: false readOnlyRootFilesystem: true runAsGroup: 1000 runAsNonRoot: true runAsUser: 1000 service: http: type: ClusterIP port: 3000 ssh: type: LoadBalancer port: 2222 ingress: enabled: true className: ingress-internal-traefik labels: environment: external annotations: kubernetes.io/ingress.class: ingress-external kubernetes.io/tls-acme: "true" cert-manager.io/cluster-issuer: letsencrypt traefik.ingress.kubernetes.io/router.tls: 'true' hosts: - host: git.nold.in paths: - path: / pathType: Prefix tls: - secretName: gitea-tls hosts: - git.nold.in resources: {} # We usually recommend not to specify default resources and to leave this as a conscious # choice for the user. This also increases chances charts run on environments with little # resources, such as Minikube. If you do want to specify resources, uncomment the following # lines, adjust them as necessary, and remove the curly braces after 'resources:'. # limits: # cpu: 100m # memory: 128Mi # requests: # cpu: 100m # memory: 128Mi persistence: enabled: true size: 10Gi #storageClass: slow gitea: admin: existingSecret: admin metrics: enabled: false serviceMonitor: enabled: false # additionalLabels: # prometheus-release: prom1 oauth: [] #name: #provider: #key: #secret: #autoDiscoverUrl: #useCustomUrls: #customAuthUrl: #customTokenUrl: #customProfileUrl: #customEmailUrl: config: APP_NAME: "Git with a lot of coffee" webhook: ALLOWED_HOST_LIST: argocd-server.argocd.svc.cluster.local ui: DEFAULT_THEME: arc-green repository: DEFAULT_BRANCH: main server: LFS_START_SERVER: true PROTOCOL: http DOMAIN: git.nold.in ROOT_URL: https://git.nold.in database: NAME: app HOST: gitea-db-rw.gitea.svc.cluster.local:5432 service: DISABLE_REGISTRATION: true lfs: STORAGE_TYPE: local picture: DISABLE_GRAVATAR: true metrics: ENABLED: false api: ENABLE_SWAGGER: false oauth: ENABLE: false proxy: PROXY_ENABLED: true PROXY_URL: "http://proxy-squid.proxy.svc.cluster.local:3128" PROXY_HOSTS: "github.com" additionalConfigFromEnvs: - name: ENV_TO_INI__DATABASE__PASSWD valueFrom: secretKeyRef: name: gitea-db-superuser key: password - name: ENV_TO_INI__DATABASE__USER valueFrom: secretKeyRef: name: gitea-db-superuser key: username memcached: enabled: true service: port: 11211 postgresql: enabled: false