registry

2025-04-08 01:36:11 +10:00
1 parent 61643c4c72
commit 7572d1b794
@@ -0,0 +1,130 @@
+---
+
+apiVersion: v1
+kind: Secret
+metadata:
+  name: gitea-admin-secret
+  namespace: ops
+type: Opaque
+stringData:
+  username: ntr
+  password: "REDACTED"
+  email: "ntr@strix.systems"
+
+---
+
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: gitea-data
+  namespace: ops
+spec:
+  storageClassName: fast
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 20Gi
+
+---
+
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: gitea-redis
+  namespace: ops
+spec:
+  storageClassName: fast
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 4Gi
+
+---
+
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: gitea-pg
+  namespace: ops
+spec:
+  storageClassName: fast
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 4Gi
+
+---
+
+apiVersion: helm.cattle.io/v1
+kind: HelmChart
+metadata:
+  name: gitea
+  namespace: ops
+spec:
+  repo: https://dl.gitea.com/charts/
+  chart: gitea
+  targetNamespace: ops
+  valuesContent: |-
+
+    ingress:
+      enabled: true
+      className: haproxy
+      annotations:
+        cert-manager.io/cluster-issuer: "letsencrypt-prod"
+      tls:
+      - secretName: git-tls
+        hosts:
+        - git.ntwl.xyz
+        # - git.strix.systems
+      hosts:
+        - host: git.ntwl.xyz
+          paths:
+            - path: /
+              pathType: Prefix
+        - host: git.strix.systems
+          paths:
+            - path: /
+              pathType: Prefix
+
+    service:
+      ssh:
+        type: LoadBalancer
+        port: 60022
+        externalTrafficPolicy: Local
+
+    redis-cluster:
+      enabled: false
+
+    redis:
+      enabled: true
+      persistence:
+        enabled: true
+        existingClaim: gitea-redis
+
+    postgresql:
+      enabled: true
+      persistence:
+        enabled: true
+        existingClaim: gitea-pg
+
+    postgresql-ha:
+      enabled: false
+
+    persistence:
+      enabled: true
+      existingClaim: gitea-data
+
+    gitea:
+      config:
+        database:
+          DB_TYPE: postgres
+        indexer:
+          ISSUE_INDEXER_TYPE: bleve
+          REPO_INDEXER_ENABLED: true
+        server:
+          SSH_PORT: 60022
+      admin:
+        existingSecret: gitea-admin-secret