ccchb
/
ansible-role-gitea
4
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
ansible-role-gitea/defaults/main.yml

89 lines
2.2 KiB
YAML
Raw Normal View History

Bunch of improvements around testing and ansible galaxy * added a license info * added galaxy tags/platforms * added travis test support * testing the playbook using molecule
2019-03-16 06:51:32 -05:00
---
Improve ARM Support (#74) * Gitea user should be a system user * Improve installation system * Download archive instead of binary * Add checksum validation * Add GPG check * Add backup process before upgrading * Improve ARM support * Improve support for Vault Encrypted JWT tokens * Fix spacing in gitea configuration template When Gitea rewrite the configuration file (e.g.: the JWT token is not set or doesn't fit their criteria), it'll align space on a per-section basis in the .ini file. If the template is not properly spaced, at the next Ansible run, you'll have an enormous diff, hidding what the real changes are. * add proper redhat/debian deps for molecule testing * Gitea group should be a system group * fix linting for CI * Update CI and meta information for up-to-date tests and distros * molecule: fix typo for redhat packages * fix typo * bump gitea version to 1.13.1 * Use Ubuntu keyservers to play nicely with everyone * Update minimum required ansible version to 2.9.8 This is required for Ubuntu Focal, which comes with systemd >= 245 The Get Facts modules doesn't work well with it before the bugfix introduced in 2.9.8 * Replace yes by True to please the linting * Truthy values needs to be lower-case * bump gitea version to 1.13.2 * perform gitea dump as gitea user * need to set become to yes * autogenerate JWT_SECRETS (#77) * autogenerate JWT_SECRETS Based on https://docs.gitea.io/en-us/command-line/#generate we will now autogenerate JWT_SECRETS if they are not defined. In my opinion a much better idea than writing a value in the default config. The check if the variables for the secrets are now 43 characters long i took out. Gitea generates itself suitable secrets, if the user given ones do not fit. * drop ansible.builtin. syntax * Update file permissions for "{{ gitea_home }}" (#75) The file permissions for {{ gitea_home }} especially in conjunction with the recurse: true flag are on closer inspection very open to all and also have a +x set on files. This should be done better. And I have done here now. By the way: To improve the -x on normal files in his gitea installation this shell command was useful for me ``` find . -type f -exec chmod a-x {} \+; find . -type f -exec chmod u=rwX {} \+; ``` * Bump cryptography from 3.2 to 3.3.2 (#79) Bumps [cryptography](https://github.com/pyca/cryptography) from 3.2 to 3.3.2. - [Release notes](https://github.com/pyca/cryptography/releases) - [Changelog](https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/3.2...3.3.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Gitea user should be a system user * Improve installation system * Download archive instead of binary * Add checksum validation * Add GPG check * Add backup process before upgrading * Improve ARM support * Fix spacing in gitea configuration template When Gitea rewrite the configuration file (e.g.: the JWT token is not set or doesn't fit their criteria), it'll align space on a per-section basis in the .ini file. If the template is not properly spaced, at the next Ansible run, you'll have an enormous diff, hidding what the real changes are. * add proper redhat/debian deps for molecule testing * Gitea group should be a system group * fix linting for CI * Update CI and meta information for up-to-date tests and distros * molecule: fix typo for redhat packages * fix typo * bump gitea version to 1.13.1 * Use Ubuntu keyservers to play nicely with everyone * Update minimum required ansible version to 2.9.8 This is required for Ubuntu Focal, which comes with systemd >= 245 The Get Facts modules doesn't work well with it before the bugfix introduced in 2.9.8 * Replace yes by True to please the linting * Truthy values needs to be lower-case * bump gitea version to 1.13.2 * perform gitea dump as gitea user * need to set become to yes * check-variables.yml doesn't exists anymore Co-authored-by: L3D <l3d@c3woc.de> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-12 11:56:31 -06:00
gitea_version: "1.13.2"
Switch gitea_version_check to true by default Pursuant to the conversation in https://github.com/thomas-maurice/ansible-role-gitea/pull/16
2019-04-29 19:57:14 -05:00
gitea_version_check: true
Allow to set a custom Download-URL for gitea
2020-05-17 08:56:23 -05:00
gitea_dl_url: "https://github.com/go-gitea/gitea/releases/download/v{{ gitea_version }}/gitea-{{ gitea_version }}-linux-{{ gitea_arch }}"
Improve ARM Support (#74) * Gitea user should be a system user * Improve installation system * Download archive instead of binary * Add checksum validation * Add GPG check * Add backup process before upgrading * Improve ARM support * Improve support for Vault Encrypted JWT tokens * Fix spacing in gitea configuration template When Gitea rewrite the configuration file (e.g.: the JWT token is not set or doesn't fit their criteria), it'll align space on a per-section basis in the .ini file. If the template is not properly spaced, at the next Ansible run, you'll have an enormous diff, hidding what the real changes are. * add proper redhat/debian deps for molecule testing * Gitea group should be a system group * fix linting for CI * Update CI and meta information for up-to-date tests and distros * molecule: fix typo for redhat packages * fix typo * bump gitea version to 1.13.1 * Use Ubuntu keyservers to play nicely with everyone * Update minimum required ansible version to 2.9.8 This is required for Ubuntu Focal, which comes with systemd >= 245 The Get Facts modules doesn't work well with it before the bugfix introduced in 2.9.8 * Replace yes by True to please the linting * Truthy values needs to be lower-case * bump gitea version to 1.13.2 * perform gitea dump as gitea user * need to set become to yes * autogenerate JWT_SECRETS (#77) * autogenerate JWT_SECRETS Based on https://docs.gitea.io/en-us/command-line/#generate we will now autogenerate JWT_SECRETS if they are not defined. In my opinion a much better idea than writing a value in the default config. The check if the variables for the secrets are now 43 characters long i took out. Gitea generates itself suitable secrets, if the user given ones do not fit. * drop ansible.builtin. syntax * Update file permissions for "{{ gitea_home }}" (#75) The file permissions for {{ gitea_home }} especially in conjunction with the recurse: true flag are on closer inspection very open to all and also have a +x set on files. This should be done better. And I have done here now. By the way: To improve the -x on normal files in his gitea installation this shell command was useful for me ``` find . -type f -exec chmod a-x {} \+; find . -type f -exec chmod u=rwX {} \+; ``` * Bump cryptography from 3.2 to 3.3.2 (#79) Bumps [cryptography](https://github.com/pyca/cryptography) from 3.2 to 3.3.2. - [Release notes](https://github.com/pyca/cryptography/releases) - [Changelog](https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/3.2...3.3.2) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Gitea user should be a system user * Improve installation system * Download archive instead of binary * Add checksum validation * Add GPG check * Add backup process before upgrading * Improve ARM support * Fix spacing in gitea configuration template When Gitea rewrite the configuration file (e.g.: the JWT token is not set or doesn't fit their criteria), it'll align space on a per-section basis in the .ini file. If the template is not properly spaced, at the next Ansible run, you'll have an enormous diff, hidding what the real changes are. * add proper redhat/debian deps for molecule testing * Gitea group should be a system group * fix linting for CI * Update CI and meta information for up-to-date tests and distros * molecule: fix typo for redhat packages * fix typo * bump gitea version to 1.13.1 * Use Ubuntu keyservers to play nicely with everyone * Update minimum required ansible version to 2.9.8 This is required for Ubuntu Focal, which comes with systemd >= 245 The Get Facts modules doesn't work well with it before the bugfix introduced in 2.9.8 * Replace yes by True to please the linting * Truthy values needs to be lower-case * bump gitea version to 1.13.2 * perform gitea dump as gitea user * need to set become to yes * check-variables.yml doesn't exists anymore Co-authored-by: L3D <l3d@c3woc.de> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-12 11:56:31 -06:00
gitea_gpg_key: "7C9E68152594688862D62AF62D9AE806EC1592E2"
gitea_gpg_server: "hkp://keyserver.ubuntu.com:80"
add version var
2019-01-07 07:56:08 -06:00
First commit
2017-01-10 15:09:34 -06:00
gitea_app_name: "Gitea"
gitea_user: "gitea"
add default "gitea_group: gitea" (#71) * delete trailing whitespace * Add gitea_group This will add the `gitea_group: gitea` and will probably RESOLVE https://github.com/thomas-maurice/ansible-role-gitea/issues/70 * update variable length update variable length to make this role idempotent * vars should not include special character
2021-01-27 08:13:02 -06:00
gitea_group: "gitea"
First commit
2017-01-10 15:09:34 -06:00
gitea_home: "/var/lib/gitea"
Update gitea and create shell variable The current gitea version is updated to 1.7.5. And now you are able to customize the shell of your gitea user. [Issue 14](https://github.com/thomas-maurice/ansible-role-gitea/issues/14)
2019-04-09 06:04:29 -05:00
gitea_shell: "/bin/false"
Add variable to enable adding CAP_NET_BIND_SERVICE to systemd service
2020-05-20 07:13:11 -05:00
gitea_systemd_cap_net_bind_service: false
First commit
2017-01-10 15:09:34 -06:00
Add config option to set repository path different to home_path
2020-05-18 16:37:17 -05:00
gitea_repository_root: "{{ gitea_home }}"
First commit
2017-01-10 15:09:34 -06:00
gitea_user_repo_limit: -1
gitea_http_domain: localhost
gitea_root_url: http://localhost:3000
gitea_protocol: http
gitea_http_listen: 127.0.0.1
gitea_http_port: 3000
gitea_disable_http_git: false
gitea_offline_mode: true
Enable git lfs options With this change it is possible to enable the git-lfs server. And to configure where data are stored.
2019-07-05 11:46:41 -05:00
gitea_lfs_server_enabled: false
add LFS_JWT_SECRET option + Add comments about git-lfs to the README. + New variable for LFS_JWT_SECRET. + absolute path for gitea_lfs_content_path. + maybe some help to resolve https://github.com/thomas-maurice/ansible-role-gitea/issues/70
2021-01-14 04:51:58 -06:00
gitea_lfs_content_path: "{{ gitea_home }}/data/lfs"
autogenerate JWT_SECRETS (#77) * autogenerate JWT_SECRETS Based on https://docs.gitea.io/en-us/command-line/#generate we will now autogenerate JWT_SECRETS if they are not defined. In my opinion a much better idea than writing a value in the default config. The check if the variables for the secrets are now 43 characters long i took out. Gitea generates itself suitable secrets, if the user given ones do not fit. * drop ansible.builtin. syntax
2021-02-10 13:04:13 -06:00
gitea_lfs_jwt_secret: ''
Enable git lfs options With this change it is possible to enable the git-lfs server. And to configure where data are stored.
2019-07-05 11:46:41 -05:00
Add the support for mysql and postgres databases and documentation
2017-01-11 01:01:37 -06:00
gitea_db_type: sqlite3
gitea_db_host: 127.0.0.0:3306
gitea_db_name: root
gitea_db_user: gitea
fix gitea_db_passord typo
2019-03-08 04:58:14 -06:00
gitea_db_password: lel
Add the support for mysql and postgres databases and documentation
2017-01-11 01:01:37 -06:00
gitea_db_ssl: disable
gitea_db_path: "{{ gitea_home }}/data/gitea.db"
First commit
2017-01-10 15:09:34 -06:00
gitea_ssh_listen: 0.0.0.0
gitea_ssh_domain: localhost
gitea_start_ssh: true
gitea_ssh_port: 2222
gitea_secret_key: T0pS3cr31
add new ini parameter INTERNAL_TOKEN
2019-03-10 07:41:39 -05:00
gitea_internal_token: SomethingVeryLong
Add disable_git_hooks config option to security
2020-12-03 15:00:18 -06:00
gitea_disable_git_hooks: true
First commit
2017-01-10 15:09:34 -06:00
gitea_show_user_email: false
gitea_disable_gravatar: true
gitea_disable_registration: false
adds template variable for SHOW_REGISTRATION_BUTTON
2019-03-10 08:40:33 -05:00
gitea_show_registration_button: true
First commit
2017-01-10 15:09:34 -06:00
gitea_require_signin: true
gitea_enable_captcha: true
add variable gitea_only_allow_external_registration
2020-05-09 21:18:59 -05:00
gitea_only_allow_external_registration: false
Add configuration option for enabling notify email
2020-07-28 05:22:35 -05:00
gitea_enable_notify_mail: false
Update main.yml
2019-02-20 10:08:09 -06:00
gitea_force_private: false
adds template variable for IS_TLS_ENABLED
2019-03-10 08:14:57 -05:00
adds mailer config parameters
2019-03-08 05:29:34 -06:00
gitea_mailer_enabled: false
adds template variable for IS_TLS_ENABLED
2019-03-10 08:14:57 -05:00
gitea_mailer_skip_verify: false
gitea_mailer_tls_enabled: true
Bunch of improvements around testing and ansible galaxy * added a license info * added galaxy tags/platforms * added travis test support * testing the playbook using molecule
2019-03-16 06:51:32 -05:00
gitea_mailer_host: localhost:25
gitea_mailer_from: noreply@your.domain
Add username and password for smpt servers. Defaulting to blank
2019-06-10 14:10:39 -05:00
gitea_mailer_user: ""
gitea_mailer_password: ""
issue #53: define mailer type
2020-07-21 07:18:08 -05:00
gitea_mailer_type: smtp
adds support for optional deployment of fail2ban jail
2019-03-08 06:12:16 -06:00
rename gitea_install_fail2ban_config to gitea_fail2ban_enabled
2019-03-09 14:40:56 -06:00
gitea_fail2ban_enabled: false
more fail2ban config options
2019-03-09 14:46:23 -06:00
gitea_fail2ban_jail_maxretry: 10
gitea_fail2ban_jail_findtime: 3600
gitea_fail2ban_jail_bantime: 900
gitea_fail2ban_jail_action: iptables-allports
adds template variables for oauth config
2019-03-10 08:20:55 -05:00
gitea_oauth2_enabled: true
autogenerate JWT_SECRETS (#77) * autogenerate JWT_SECRETS Based on https://docs.gitea.io/en-us/command-line/#generate we will now autogenerate JWT_SECRETS if they are not defined. In my opinion a much better idea than writing a value in the default config. The check if the variables for the secrets are now 43 characters long i took out. Gitea generates itself suitable secrets, if the user given ones do not fit. * drop ansible.builtin. syntax
2021-02-10 13:04:13 -06:00
gitea_oauth2_jwt_secret: ''
adds metrics endpoint config support
2019-12-21 06:08:19 -06:00
gitea_metrics_enabled: false
gitea_metrics_token: ~
Allow to specify default theme
2020-05-09 16:01:51 -05:00
gitea_themes: gitea,arc-green
gitea_theme_default: gitea
Add config options for repository indexer
2020-06-18 00:41:59 -05:00
gitea_repo_indexer_enabled: false
gitea_repo_indexer_include: ""
gitea_repo_indexer_exclude: ""
gitea_repo_exclude_vendored: true
gitea_repo_indexer_max_file_size: 1048576
add option to specify extra configuration
2020-12-05 14:10:23 -06:00
gitea_extra_config: ""