move from gitea to forgejo

roles/forgejo/files/docker-compose.yml

@@ -0,0 +1,27 @@
+version: "3"
+
+networks:
+  traefik:
+    external: true
+
+services:
+  server:
+    image: codeberg.org/forgejo/forgejo:1.18
+    container_name: forgejo
+    environment:
+      - USER_UID=1000
+      - USER_GID=1000
+    restart: always
+    networks:
+      - traefik
+    volumes:
+      - /data/forgejo:/data
+      - /apps/forgejo/conf:/data/forgejo/conf
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+    labels:
+      - traefik.http.routers.forgejo.entrypoints=websecure
+      - traefik.http.routers.forgejo.rule=Host(`git.pizzapim.nl`)
+      - traefik.http.routers.forgejo.tls=true
+      - traefik.http.routers.forgejo.tls.certresolver=pizzapim
+      - traefik.http.services.forgejo.loadbalancer.server.port=3000

roles/forgejo/meta/main.yml

@@ -0,0 +1,4 @@
+dependencies:
+  - role: common
+  - role: docker
+  - role: traefik

roles/forgejo/tasks/main.yml

@@ -0,0 +1,31 @@
+- name: Create app directory
+  file:
+    path: /apps/forgejo
+    state: directory
+- name: Copy Docker Compose script
+  copy:
+    src: "{{ role_path }}/files/docker-compose.yml"
+    dest: /apps/forgejo/docker-compose.yml
+- name: Create data directory
+  file:
+    path: /data/forgejo
+    state: directory
+    owner: 1000
+    group: 1000
+- name: Copy conf directory
+  file:
+    path: /apps/forgejo/conf
+    state: directory
+    owner: 1000
+    group: 1000
+- name: Copy app.ini
+  template:
+    src: "{{ role_path }}/templates/app.ini"
+    dest: /apps/forgejo/conf/app.ini
+  register: config
+- name: Start the Docker Compose
+  community.docker.docker_compose:
+    project_src: /apps/forgejo
+    pull: true
+    remove_orphans: true
+    restarted: "{{ config.changed }}"

roles/forgejo/templates/app.ini

@@ -0,0 +1,99 @@
+APP_NAME = Forgejo: Beyond coding. We forge.
+RUN_MODE = prod
+RUN_USER = git
+
+[repository]
+ROOT = /data/git/repositories
+
+[repository.local]
+LOCAL_COPY_PATH = /data/gitea/tmp/local-repo
+
+[repository.upload]
+TEMP_PATH = /data/gitea/uploads
+
+[server]
+APP_DATA_PATH    = /data/gitea
+DOMAIN           = git.pizzapim.nl
+SSH_DOMAIN       = git.pizzapim.nl
+HTTP_PORT        = 3000
+ROOT_URL         = {{ forgejo.root_url }}
+DISABLE_SSH      = false
+SSH_PORT         = 2222
+SSH_LISTEN_PORT  = 22
+LFS_START_SERVER = true
+LFS_JWT_SECRET   = {{ forgejo.lfs_jwt_secret }}
+OFFLINE_MODE     = false
+
+[database]
+PATH     = /data/gitea/gitea.db
+DB_TYPE  = sqlite3
+HOST     = localhost:3306
+NAME     = gitea
+USER     = root
+PASSWD   = 
+LOG_SQL  = false
+SCHEMA   = 
+SSL_MODE = disable
+CHARSET  = utf8
+
+[indexer]
+ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve
+
+[session]
+PROVIDER_CONFIG = /data/gitea/sessions
+PROVIDER        = file
+
+[picture]
+AVATAR_UPLOAD_PATH            = /data/gitea/avatars
+REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
+ENABLE_FEDERATED_AVATAR       = false
+
+[attachment]
+PATH = /data/gitea/attachments
+
+[log]
+MODE      = console
+LEVEL     = info
+ROUTER    = console
+ROOT_PATH = /data/gitea/log
+
+[security]
+INSTALL_LOCK                  = true
+SECRET_KEY                    = 
+REVERSE_PROXY_LIMIT           = 1
+REVERSE_PROXY_TRUSTED_PROXIES = *
+INTERNAL_TOKEN                = {{ forgejo.internal_token }}
+PASSWORD_HASH_ALGO            = pbkdf2
+
+[service]
+DISABLE_REGISTRATION              = true
+REQUIRE_SIGNIN_VIEW               = false
+REGISTER_EMAIL_CONFIRM            = false
+ENABLE_NOTIFY_MAIL                = false
+ALLOW_ONLY_EXTERNAL_REGISTRATION  = false
+ENABLE_CAPTCHA                    = false
+DEFAULT_KEEP_EMAIL_PRIVATE        = true
+DEFAULT_ALLOW_CREATE_ORGANIZATION = true
+DEFAULT_ENABLE_TIMETRACKING       = true
+NO_REPLY_ADDRESS                  = noreply.localhost
+
+[lfs]
+PATH = /data/git/lfs
+
+[mailer]
+ENABLED   = true
+SMTP_ADDR = {{ forgejo.mailer_host }}
+SMTP_PORT = 587
+FROM      = {{ forgejo.mailer_from }}
+USER      = 
+PASSWD    = 
+
+[openid]
+ENABLE_OPENID_SIGNIN = true
+ENABLE_OPENID_SIGNUP = false
+
+[repository.pull-request]
+DEFAULT_MERGE_STYLE = merge
+
+[repository.signing]
+DEFAULT_TRUST_MODEL = committer

roles/forgejo/vars/main.yml

@@ -0,0 +1,23 @@
+forgejo:
+  root_url: "https://git.pizzapim.nl"
+  mailer_host: "smtp.tweak.nl"
+  mailer_from: "git@kunis.nl"
+  lfs_jwt_secret: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          66613032363837346461326131303839646332646233633736623865346135623739343233396165
+          6530326162323466623939393133623336366466343837620a613532616365646137326138383235
+          32313264653262656564336531646662323039623865393366616536633531306430336137313862
+          3361373539373561390a653236306433393737616561306236343362396438366134313032656233
+          35626364373961613361366138383566353463626136393861383934326263383336393766623063
+          3434656437663165376635326139383065383861386133623765
+  internal_token: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          62633334656235613035343830326237633637626639363465313861323734393766636464303862
+          3936306561343863316630616164616537323537333262650a336337303232623832636666353038
+          64313134383330646537356432383332386238373835656663313431373939373630373566396339
+          6561643037383666340a643464326531623731303564646464376239613263643761643766623930
+          37623362326561346262306331376663313661633635323435333339396138383134303364306532
+          37353264363737643965643932356336633734316534303262336461313038626538396536333964
+          36353635323731353061393430656166363263366437313434336139616666326335633037663336
+          37353665613938613731316330396461343632643039643864343164303937613263343262623964
+          33366364636339623633653035313736653563363064646233383437373431373232