Forgejo role

Deploys Forgejo and a PostgreSQL or MariaDB database in a rootless Podman pod.

Required variables:

forgejo_url: git.example.com
forgejo_database_pass: "{{ vault_forgejo_database_pass }}"

Select the database backend with forgejo_database_type (postgres or mysql). Pin forgejo_postgres_image_tag or forgejo_mysql_image_tag to the major version already present in forgejo_database_volume before deploying an existing instance.

Override Forgejo settings directly through its environment-to-ini interface:

forgejo_env:
  FORGEJO__security__SECRET_KEY: "{{ vault_forgejo_secret_key }}"
  FORGEJO__security__INTERNAL_TOKEN: "{{ vault_forgejo_internal_token }}"

The container tasks use no_log: true because their environment contains database and mail credentials.

Deploy or remove the role through the repository entry point:

./run.sh deploy actual --tags forgejo --limit orientpoint
./run.sh deploy actual --tags forgejo --limit orientpoint -e deployment_state=absent