Gitea role

Deploys Gitea and a PostgreSQL or MariaDB database in a rootless Podman pod.

Required variables:

gitea_url: git.example.com
gitea_database_pass: "{{ vault_gitea_database_pass }}"

Select the database backend with gitea_database_type (postgres or mysql). Pin gitea_postgres_image_tag or gitea_mysql_image_tag to the major version already present in gitea_database_volume before deploying an existing instance.

Override Gitea settings directly through its environment-to-ini interface:

gitea_env:
  GITEA__security__SECRET_KEY: "{{ vault_gitea_secret_key }}"
  GITEA__security__INTERNAL_TOKEN: "{{ vault_gitea_internal_token }}"

The Gitea image stores app.ini in gitea_config_volume; application data is stored separately in gitea_server_volume. Container tasks use no_log: true because their environments contain database and mail credentials.

Deploy or remove the role through the repository entry point:

./run.sh deploy actual --tags gitea --limit orientpoint
./run.sh deploy actual --tags gitea --limit orientpoint -e deployment_state=absent