feat: add k8s/forgejo

2024-09-12 10:36:25 +02:00 · 2024-09-12 10:36:25 +02:00 · e520f41e9d
commit e520f41e9d
parent d9388f9cd5
5 changed files with 265 additions and 1 deletions
--- a/k8s/argo-apps/forgejo.yaml
+++ b/k8s/argo-apps/forgejo.yaml
@ -0,0 +1,109 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: forgejo
+  namespace: argocd
+spec:
+  destination:
+    name: ''
+    namespace: apps-roboces
+    server: https://kubernetes.default.svc
+  sources:
+    - chart: forgejo
+      repoURL: code.forgejo.org/forgejo-helm
+      targetRevision: 8.2.2
+      helm:
+        valuesObject:
+          replicaCount: 2
+          service:
+            http:
+              type: LoadBalancer
+            ssh:
+              type: NodePort
+          ingress:
+            enabled: true
+            className: traefik
+            https: true
+            hosts:
+              - host: git.roboces.dev
+                paths:
+                  - path: /
+                    pathType: Prefix
+            tls: []
+          persistence:
+            size: 50Gi
+            storageClass: truenas-nfs-csi
+            accessModes:
+              - ReadWriteMany
+          signing:
+            enabled: true
+            existingSecret: secrets-forgejo-signing
+          gitea:
+            admin:
+              existingSecret: secrets-forgejo-admin
+            metrics:
+              enabled: true
+              serviceMonitor:
+                enabled: true
+            config:
+              indexer:
+                ISSUE_INDEXER_CONN_STR: http://elastic-elasticsearch.apps-fuku.svc.cluster.local:9200
+                ISSUE_INDEXER_ENABLED: true
+                ISSUE_INDEXER_TYPE: elasticsearch
+                REPO_INDEXER_ENABLED: false
+                REPO_INDEXER_TYPE: elasticsearch
+              actions:
+                ENABLED: true
+                DEFAULT_ACTIONS_URL: https://github.com
+              picture:
+                DISABLE_GRAVATAR: false
+                ENABLE_FEDERATED_AVATAR: true
+                AVATAR_UPLOAD_PATH: /data/gitea/avatars
+                REPOSITORY_AVATAR_UPLOAD_PATH: /data/gitea/repo-avatars
+              oauth:
+                existingSecret: secrets-forgejo-oidc
+              openid:
+                ENABLE_OPENID_SIGNIN: false
+                ENABLE_OPENID_SIGNUP: false
+              attachment:
+                PATH: /data/gitea/attachments
+              log:
+                MODE: console
+                LEVEL: debug
+                ROOT_PATH: /data/gitea/log
+              lfs:
+                LFS_CONTENT_PATH: /data/gitea/lfs
+              service:
+                REGISTER_EMAIL_CONFIRM: true
+                ENABLE_NOTIFY_MAIL: true
+                DISABLE_REGISTRATION: false
+                ALLOW_ONLY_EXTERNAL_REGISTRATION: true
+                ENABLE_CAPTCHA: false
+                REQUIRE_SIGNIN_VIEW: false
+                DEFAULT_KEEP_EMAIL_PRIVATE: false
+                DEFAULT_ALLOW_CREATE_ORGANIZATION: true
+                DEFAULT_ENABLE_TIMETRACKING: true
+                NO_REPLY_ADDRESS: git@fukurokuju.dev
+              server:
+                ROOT_URL: https://git.roboces.dev/
+
+
+            additionalConfigSources:
+              - secret:
+                  secretName: secrets-forgejo-email
+              - secret:
+                  secretName: secrets-forgejo-db
+              - secret:
+                  secretName: secrets-forgejo-lfs
+              - secret:
+                  secretName: secrets-forgejo-internal
+          postgresql-ha:
+            enabled: false
+
+    - path: k8s/services/forgejo
+      repoURL: https://git.roboces.dev/catalin/fukuops.git
+      targetRevision: main
+  project: roboces
+  syncPolicy:
+    automated: {}