Newer versions of Gitea need a JWT secret for Oauth2. Gitea will attempt to generate one at startup if it is not already specified in the configuration file, but this will fail since the file is not writable by the user running the service. As such, it must be set via configuration policy.
67 lines
1.5 KiB
Django/Jinja
67 lines
1.5 KiB
Django/Jinja
APP_NAME = Gitea: Git with a cup of tea
|
|
RUN_USER = gitea
|
|
RUN_MODE = prod
|
|
|
|
[security]
|
|
INTERNAL_TOKEN = {{ gitea_internal_token }}
|
|
INSTALL_LOCK = true
|
|
SECRET_KEY = {{ gitea_secret_key }}
|
|
|
|
[database]
|
|
DB_TYPE = sqlite3
|
|
HOST = 127.0.0.1:3306
|
|
NAME = gitea
|
|
USER = gitea
|
|
PASSWD =
|
|
SSL_MODE = disable
|
|
PATH = /var/lib/gitea/data/gitea.db
|
|
|
|
[repository]
|
|
ROOT = /var/lib/gitea/gitea-repositories
|
|
|
|
[server]
|
|
APP_DATA_PATH = /var/lib/gitea
|
|
SSH_DOMAIN = {{ gitea_ssh_domain }}
|
|
DOMAIN = {{ gitea_http_domain }}
|
|
HTTP_PORT = 3000
|
|
ROOT_URL = {{ gitea_root_url }}
|
|
DISABLE_SSH = false
|
|
SSH_PORT = 22
|
|
LFS_START_SERVER = true
|
|
LFS_CONTENT_PATH = /var/lib/gitea/data/lfs
|
|
LFS_JWT_SECRET = {{ gitea_lfs_jwt_secret }}
|
|
OFFLINE_MODE = false
|
|
|
|
[mailer]
|
|
ENABLED = false
|
|
|
|
[service]
|
|
REGISTER_EMAIL_CONFIRM = false
|
|
ENABLE_NOTIFY_MAIL = false
|
|
DISABLE_REGISTRATION = true
|
|
ENABLE_CAPTCHA = false
|
|
REQUIRE_SIGNIN_VIEW = false
|
|
DEFAULT_KEEP_EMAIL_PRIVATE = true
|
|
DEFAULT_ALLOW_CREATE_ORGANIZATION = false
|
|
DEFAULT_ENABLE_TIMETRACKING = false
|
|
NO_REPLY_ADDRESS = noreply.example.org
|
|
|
|
[picture]
|
|
DISABLE_GRAVATAR = false
|
|
ENABLE_FEDERATED_AVATAR = true
|
|
|
|
[openid]
|
|
ENABLE_OPENID_SIGNIN = false
|
|
ENABLE_OPENID_SIGNUP = false
|
|
|
|
[session]
|
|
PROVIDER = file
|
|
|
|
[log]
|
|
MODE = file
|
|
LEVEL = Info
|
|
ROOT_PATH = /var/log/gitea
|
|
|
|
[oauth2]
|
|
JWT_SECRET = {{ gitea_oauth2_jwt_secret }}
|