hive-apps/projects/gitea/values/gitea.yaml

162 lines
3.4 KiB
YAML

# Gitea
image:
registry: "codeberg.org"
repository: forgejo/forgejo
# Overrides the image tag whose default is the chart appVersion.
tag: "1.21.2-0"
pullPolicy: Always
rootless: true
#statefulset:
#env:
# - name: HTTP_PROXY
# value: http://proxy-squid.proxy.svc.cluster.local:3128
# - name: HTTPS_PROXY
# value: http://proxy-squid.proxy.svc.cluster.local:3128
# - name: http_proxy
# value: http://proxy-squid.proxy.svc.cluster.local:3128
# - name: https_proxy
# value: http://proxy-squid.proxy.svc.cluster.local:3128
# - name: NO_PROXY
# value: argocd-server.argocd.svc.cluster.local,10.43.0.0/16
# - name: no_proxy
# value: argocd-server.argocd.svc.cluster.local,10.43.0.0/16
containerSecurityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
# # https://gitea.com/gitea/helm-chart/issues/161
add:
- SYS_CHROOT
privileged: false
readOnlyRootFilesystem: true
runAsNonRoot: true
podSecurityContext:
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
service:
http:
type: ClusterIP
port: 3000
ssh:
type: LoadBalancer
port: 2222
ingress:
enabled: true
className: ingress-external
labels:
environment: external
annotations:
kubernetes.io/tls-acme: "true"
cert-manager.io/cluster-issuer: letsencrypt
external-dns.alpha.kubernetes.io/hostname: git.nold.in
external-dns.alpha.kubernetes.io/target: nold.in
external-dns.alpha.kubernetes.io/cloudflare-proxied: "true"
hosts:
- host: git.nold.in
paths:
- path: /
pathType: Prefix
tls:
- secretName: gitea-tls
hosts:
- git.nold.in
resources:
limits:
cpu: 4000m
memory: 2048Mi
# requests:
# cpu: 100m
# memory: 128Mi
persistence:
enabled: true
size: 10Gi
#storageClass: slow
gitea:
admin:
existingSecret: admin
metrics:
enabled: false
serviceMonitor:
enabled: false
# additionalLabels:
# prometheus-release: prom1
oauth: []
#name:
#provider:
#key:
#secret:
#autoDiscoverUrl:
#useCustomUrls:
#customAuthUrl:
#customTokenUrl:
#customProfileUrl:
#customEmailUrl:
config:
APP_NAME: "Let's forge some forks"
webhook:
ALLOWED_HOST_LIST: argocd-server.argocd.svc.cluster.local
ui:
DEFAULT_THEME: arc-green
repository:
DEFAULT_BRANCH: main
server:
LFS_START_SERVER: true
PROTOCOL: http
DOMAIN: git.nold.in
ROOT_URL: https://git.nold.in
database:
NAME: app
HOST: gitea-db-rw.gitea.svc.cluster.local:5432
service:
DISABLE_REGISTRATION: true
lfs:
STORAGE_TYPE: local
picture:
DISABLE_GRAVATAR: true
metrics:
ENABLED: false
api:
ENABLE_SWAGGER: false
oauth:
ENABLE: false
proxy:
PROXY_ENABLED: true
PROXY_URL: "http://proxy-squid.proxy.svc.cluster.local:3128"
PROXY_HOSTS: "github.com"
additionalConfigFromEnvs:
- name: FORGEJO__DATABASE__PASSWD
valueFrom:
secretKeyRef:
name: gitea-db-superuser
key: password
- name: FORGEJO__DATABASE__USER
valueFrom:
secretKeyRef:
name: gitea-db-superuser
key: username
memcached:
enabled: true
service:
port: 11211
postgresql:
enabled: false
redis-cluster:
enabled: false
postgresql-ha:
enabled: false