roles/gitea: Add Oauth2 JWT Secret

Newer versions of Gitea need a JWT secret for Oauth2.  Gitea will
attempt to generate one at startup if it is not already specified in the
configuration file, but this will fail since the file is not writable by
the user running the service.  As such, it must be set via configuration
policy.

roles/gitea/tasks/main.yml

@@ -33,3 +33,8 @@
     dest=/etc/httpd/conf.d/gitea.conf
     mode=0644
   notify: reload httpd
+- name: ensure selinux allows apache to proxy for gitea
+  seboolean:
+    name=httpd_can_network_connect
+    persistent=yes
+    state=yes

roles/gitea/templates/app.ini.j2

@@ -61,3 +61,6 @@ PROVIDER = file
 MODE      = file
 LEVEL     = Info
 ROOT_PATH = /var/log/gitea
+
+[oauth2]
+JWT_SECRET = {{ gitea_oauth2_jwt_secret }}