ec98a83b48
Both configs defined a second secret in a later section starting the numbering over, so CFG_GITEA_METRICS_TOKEN_1 and CFG_GITEA_ADMIN_PASSWORD_1 both read RANDOMIZEDPASSWORD1 — and the replacer generates one value per distinct placeholder and seds every occurrence, so the two came out identical. Same for Invidious's HMAC key and admin password. Predates the slot rename. Currently latent, since neither admin password is consumed by anything, but it would silently pair a live secret with whatever gets wired to the other key. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
75 lines
3.8 KiB
Plaintext
Executable File
75 lines
3.8 KiB
Plaintext
Executable File
#
|
|
# =============================================================================
|
|
# GENERAL CONFIGURATION
|
|
# =============================================================================
|
|
# APP_NAME = name of application for use in scripts
|
|
# COMPOSE_FILE = default for no app_name in docker-compose file name, app if there is
|
|
# BACKUP = if true, include this application in backup operations
|
|
# UPDATE_TYPE = auto: new image builds are applied automatically (a recovery snapshot is taken first), manual: only when you press Update
|
|
# HEALTHCHECK = if true, default docker health checks for that container will be enabled
|
|
# AUTHELIA = if true, use Authelia authentication, if false turned off.
|
|
# HEADSCALE = options : false, local, remote (see general config). e.g false or local,remote
|
|
# MONITORING = if true, export this app's metrics to Prometheus + Grafana (needs both apps installed)
|
|
# METRICS_TOKEN = bearer token guarding /metrics (rides the public web port); auto-generated, mirrored into the Prometheus scrape config
|
|
#
|
|
CFG_GITEA_APP_NAME=gitea
|
|
CFG_GITEA_BACKUP=true
|
|
CFG_GITEA_BACKUP_STRATEGY=auto
|
|
CFG_GITEA_UPDATE_TYPE=auto
|
|
CFG_GITEA_COMPOSE_FILE=default
|
|
CFG_GITEA_HEALTHCHECK=true
|
|
CFG_GITEA_AUTHELIA=false
|
|
CFG_GITEA_HEADSCALE=false
|
|
CFG_GITEA_MONITORING=false
|
|
CFG_GITEA_METRICS_TOKEN_1=RANDOMIZEDPASSWORD1
|
|
|
|
# =============================================================================
|
|
# METADATA
|
|
# =============================================================================
|
|
# CATEGORY = application category for grouping
|
|
# TITLE = display name for the application
|
|
# DESCRIPTION = short description of the application
|
|
# LONG_DESCRIPTION = detailed description of the application
|
|
# URL = source repository or documentation URL
|
|
# ACTIONS = available actions for this application
|
|
#
|
|
CFG_GITEA_CATEGORY="development"
|
|
CFG_GITEA_TITLE="Gitea"
|
|
CFG_GITEA_DESCRIPTION="Git Repository Management"
|
|
CFG_GITEA_LONG_DESCRIPTION="Gitea is a lightweight, self-hosted Git service written in Go that provides a painless self-hosted Git service with a minimal setup"
|
|
CFG_GITEA_URL="https://github.com/go-gitea/gitea"
|
|
CFG_GITEA_ACTIONS="configure|install|restart|shutdown|uninstall"
|
|
#
|
|
# =============================================================================
|
|
# NETWORK CONFIGURATION
|
|
# =============================================================================
|
|
# DOMAIN = number of domain from the general config, useful when using multiple domains
|
|
# WHITELIST = if true only allow whitelisted ips (see general config), if false allow all
|
|
#
|
|
CFG_GITEA_DOMAIN=1
|
|
CFG_GITEA_WHITELIST=false
|
|
CFG_GITEA_NETWORK=default
|
|
#
|
|
# =============================================================================
|
|
# PORT CONFIGURATION
|
|
# =============================================================================
|
|
# PORT_ = port configuration: app|name|external:internal|access|protocol|login|traefik|webui|description
|
|
# - app: application name
|
|
# - name: service identifier (webui, dns, ssh, etc.)
|
|
# - external:internal: port mapping (external can be 'random' for auto-allocation)
|
|
# - access: 'public' (internet accessible), 'private' (local network only), 'disabled' (not running)
|
|
# - protocol: 'tcp' or 'udp'
|
|
# - login: if true, this port requires basic-auth via Traefik (only meaningful when traefik=true)
|
|
# - traefik: if true, Traefik handles this port (reverse proxy)
|
|
# - webui: if true, this port serves the main web interface
|
|
# - description: human-readable description of the service
|
|
#
|
|
CFG_GITEA_PORT_1="gitea-service|webui|random:3000|public|tcp|false|true|true|Web Interface||gitea"
|
|
CFG_GITEA_PORT_2="gitea-service|ssh|random:22|private|tcp|false|false|false|Git SSH Access|"
|
|
|
|
# AUTH_PROFILE = capability tier for the WebUI auth tools (single_password | user_password | multi_user)
|
|
CFG_GITEA_AUTH_PROFILE=multi_user
|
|
CFG_GITEA_ADMIN_USER=
|
|
CFG_GITEA_ADMIN_EMAIL=
|
|
CFG_GITEA_ADMIN_PASSWORD_1=RANDOMIZEDPASSWORD2
|