server/gitea: Reworked configuration with defaults

dehydrated
Felix Stupp 4 years ago
parent a9798fedc8
commit 5555c86357
Signed by: zocker
GPG Key ID: 93E1BD26F6B02FB7

@ -1,6 +1,7 @@
---
domain: "gitea.localhost"
description: "{{ domain }} Gitea"
gitea_system_user: "{{ domain | regex_replace('[^A-Za-z0-9-]+', '-') }}"
gitea_service_name: "{{ domain }}.service"
@ -8,7 +9,9 @@ gitea_service_name: "{{ domain }}.service"
gitea_user_directory: "{{ global_webservers_directory }}/{{ domain }}"
gitea_installation_directory: "{{ gitea_user_directory }}/bin"
gitea_custom_directory: "{{ gitea_installation_directory }}/custom"
gitea_data_directory: "{{ gitea_user_directory }}/data"
gitea_repositories_directory: "{{ gitea_user_directory }}/repositories"
gitea_lfs_directory: "{{ gitea_data_directory }}/lfs"
gitea_binary_path: "{{ gitea_installation_directory }}/gitea"
gitea_socket_path: "{{ gitea_user_directory }}/gitea.socket"
gitea_configuration_path: "{{ gitea_custom_directory }}/app.ini"
@ -17,6 +20,174 @@ database_user: "gitea"
# database_pass from mysql/database
# database_name from mysql/database
gitea_repository_force_private: no # Force new repositories to be private
gitea_repository_default_private: public # Default visibility on new projects )(public / private / last)
gitea_repository_max_creation: -1 # Maximum creations of repositories per user (-1 means no limit)
gitea_repository_pull_request_queue_length: 1000 # Patch test queue length
gitea_repository_mirror_queue_length: 1000 # Mirror sync queue length
gitea_reopsitory_preferred_licenses: # Preferred Licenses to place at the top of the list, the name must match the filename in conf/license or custom/conf/license
- "Apache License 2.0"
- "MIT License"
gitea_reopsitory_preferred_licenses_additional: [] # Appends to list above
gitea_repository_disable_http: no # Disable HTTP access to repositories
gitea_repository_use_compat_ssh_uri: no # Force ssh:// clone url instead of scp-style
gitea_repository_default_close_issues_via_any_branch: no # Default for closing issues by commit to non-default branch
gitea_repository_push_create_on_user: yes # Create repository while pushing to user namespace
gitea_repository_push_create_on_org: yes # Create repository while pushing to org namespace
gitea_repository_disabled_repo_units: [] # Disable units of all reopsitories globally
gitea_pull_request_wip_prefixes: # Prefixes for pull request to be marked as WIP
- "WIP:"
- "[WIP]"
gitea_pull_request_wip_prefixes_additional: [] # Appends to list above
gitea_pull_request_close_keywords: # Keywords for automatically closing an issue using a pull request / commit
- close
- closed
- closes
- fix
- fixed
- fixes
- resolve
- resolved
- resolves
gitea_pull_request_close_keywords_additional: [] # Appends to list above
gitea_pull_request_reopen_keywords: # Keywords for automatically opening an issue using a pull request / commit
- reopen
- reopened
- reopens
gitea_pull_request_reopen_keywords_additional: [] # Appends to list above
gitea_pull_request_default_merge_message_commits_limit: 50 # Commits included in default squash commit message
gitea_pull_request_default_merge_message_size: 5120 # Maximum size for default squash commit message
gitea_pull_request_default_merge_message_all_authors: no # Name all authors in squash commit message
gitea_pull_request_default_merge_message_max_approvers: 10 # Max approvers to be named in squash commit message
gitea_pull_request_default_merge_message_official_approvers_only: yes # Name only official approvers in squash commit message
gitea_signing_initial_commit: # Requirements for signed initial commit
- twofa
gitea_signing_wiki: # Requirements for signed wiki commits
- parentsigned
- twofa
gitea_signing_crud_actions: # Requirements for signed online commits (not first)
- parentsigned
- twofa
gitea_signing_merges: # Requirements for signed online merges
- approved
- parentsigned
- twofa
gitea_ui_explore_paging: 20 # Number of repositories on explore page
gitea_ui_issue_paging: 10 # Number of issues in one page
gitea_ui_feed_max_commit: 5 # Max commits in activity feed
gitea_ui_graph_max_commit: 100 # Max commits is commit graph
gitea_ui_code_comment_lines: 4 # Number of lines of code shown for code comment
gitea_ui_theme_color: "#6cc644" # Theme color for meta tag for Android / Chrome
gitea_ui_max_display_file: "{{ 8 * 1024 * 1024 }}" # Max size of files to be displayed in bytes
gitea_ui_show_user_email: yes # Show user email in explore users page
gitea_ui_default_theme: arc-green #
gitea_ui_themes: # Available themes
- arc-green
- gitea
gitea_ui_themes_additional: [] # Appends to list above
gitea_ui_reactions: # Available reactions, for whole list see https://gitea.com/gitea/gitea.com/issues/8
- +1
- -1
- confused
- laugh
- hooray
- heart
- rocket
- eyes
gitea_ui_reactions_additional: [] # Appends to list above
gitea_ui_default_show_full_name: no # Show full name if given
gitea_ui_search_repo_description: yes # Search within descriptions if search on explore page
gitea_ui_use_service_worker: yes # Enable service worker for caching frontend assets
gitea_ui_admin_user_paging: 50 # Number of users displayed on one page
gitea_ui_admin_repo_paging: 50 # Number of repos displayed on one page
gitea_ui_admin_notice_paging: 25 # Number of notices displayed on one page
gitea_ui_admin_org_paging: 50 # Number of orgs displayed on one page
gitea_ui_user_repo_paging: 15 # Number of repos displayed on one page
gitea_ui_meta_author: "{{ description }}" # Author for meta / titlepage
gitea_ui_meta_description: "{{ description }} ({{ domain }})" # Description for meta / titlepage
gitea_ui_meta_keywords: # Keywords for meta
- git
- gitea
- go
- self-hosted
gitea_ui_meta_keywords_additional: [] # Appends to list above
gitea_markdown_hard_line_break: no # Enable hard link break extension
gitea_markdown_custom_url_schemes: [] # Allows custom URL-schemes as links
gitea_markdown_file_extensions: # List of file extensions which should be rendered as markdown files
- md
- markdown
- mdown
- mkd
gitea_markdown_file_extensions_additional: [] # Appends to list above
gitea_server_offline_mode: no # Disable cdn files in "prod" mode
gitea_server_lfs_support: yes # Enable git-lfs support
gitea_server_lfs_auth_expiry: 20m # lfs authentication validity
gitea_ssh_min_size_ed25519: 256
gitea_ssh_min_size_ecdsa: 256
gitea_ssh_min_size_rsa: 2048
gitea_ssh_min_size_dsa: -1
gitea_admin_disable_org_creation: no # Disable regular org creation
gitea_admin_default_email_notifications: "enabled" # Default email notifications for users
gitea_security_login_remember: 7 # Remember login for given time in days
gitea_security_min_password: 8 # Min password length
gitea_security_disable_git_hooks: yes # Prevent creating custom git hooks
gitea_security_password_complexity: # Check passwords for given character classes
- lower
- upper
- digit
- spec
gitea_openid_enable: yes # Enable OpenID SignIn
gitea_openid_whitelisted_urls: "" # Restrict OpenID to whitelisted domains using POSIX regexp
gitea_openid_blacklisted_urls: "" # Restrict OpenID by blacklisting domains using POSIX regexp
gitea_service_require_signin: no # Require sign in for users to see anything
gitea_service_default_email_private: no # Default keep email address private
gitea_service_default_allow_create_org: yes # Default allow creating org
gitea_service_default_org_visibility: public # Default org visibility on creation, public / limited / private
gitea_service_default_org_member_visible: no # Default membership to org visible
gitea_service_enable_user_heatmap: yes # Enable user heatmap on profiles
gitea_service_enable_timetracking: yes # Enable timetracking globbally
gitea_service_default_enable_timetracking: yes # Enable timetracking per default
gitea_service_default_timetracking_contributers_only: yes # Timetracking for contributers only per default
gitea_service_show_registration_button: yes # Show registration button # TODO Link to enable registration
gitea_service_auto_watch_new_repos: yes # Auto watch repository after creation
gitea_service_auto_watch_on_changes: no # Auto watch repository on changes
gitea_picture_avatar_max_width: 4096 # Max width for avatars
gitea_picture_avatar_max_height: 3072 # Max height for avatars
gitea_picture_avatar_max_size: "{{ 1 * 1024 * 1024 }}" # Max size for avatars
gitea_picture_gravatar_source: gravatar # Gravatar source service
gitea_picture_disable_gravatar: yes # Disable gravatar service
gitea_picture_enable_federated_avatar: no # Enable federated avatar service
gitea_attachment_enabled: yes # Enable attachments
gitea_attachment_allowed_types: # Allow types as attachments
- image/jpeg
- image/png
- application/zip
- application/gzip
gitea_attachment_allowed_types_additional: [] # Appends to list above
gitea_attachment_max_size: 4 # Max size of attachments in MB
gitea_attachment_max_files: 5 # Max files per upload
gitea_markup_asciidoc_enabled: no # Enable asciidoc rendering
gitea_markup_asciidoc_extensions: # List of file extensions which should be rendered as asciidoc files
- adoc
- asciidoc
gitea_markup_asciidoc_extensions_additional: [] # Appends to list above
gitea_internal_token: "{{ lookup('password', 'credentials/' + inventory_hostname + '/' + domain + '/internal_token length=80') }}"
gitea_cookie_secret: "{{ lookup('password', 'credentials/' + inventory_hostname + '/' + domain + '/secret_key length=80') }}"
gitea_lfs_jwt_secret: "{{ lookup('password', 'credentials/' + inventory_hostname + '/' + domain + '/lfs_jwt_secret length=43') }}"

@ -4,7 +4,7 @@
; see https://docs.gitea.io/en-us/config-cheat-sheet/ for additional documentation.
; App name that shows in every page title
APP_NAME = Gitea: Git with a cup of tea
APP_NAME = {{ description }}
; Change it if you run locally
RUN_USER = {{ gitea_system_user }}
; Either "dev", "prod" or "test", default is "dev"
@ -16,20 +16,20 @@ SCRIPT_TYPE = bash
; Default ANSI charset
ANSI_CHARSET =
; Force every new repository to be private
FORCE_PRIVATE = false
FORCE_PRIVATE = {{ gitea_repository_force_private | ternary('true', 'false') }}
; Default privacy setting when creating a new repository, allowed values: last, private, public. Default is last which means the last setting used.
DEFAULT_PRIVATE = last
DEFAULT_PRIVATE = {{ gitea_repository_default_private }}
; Global limit of repositories per user, applied at creation time. -1 means no limit
MAX_CREATION_LIMIT = -1
MAX_CREATION_LIMIT = {{ gitea_repository_max_creation }}
; Mirror sync queue length, increase if mirror syncing starts hanging
MIRROR_QUEUE_LENGTH = 1000
MIRROR_QUEUE_LENGTH = {{ gitea_repository_mirror_queue_length }}
; Patch test queue length, increase if pull request patch testing starts hanging
PULL_REQUEST_QUEUE_LENGTH = 1000
PULL_REQUEST_QUEUE_LENGTH = {{ gitea_repository_pull_request_queue_length }}
; Preferred Licenses to place at the top of the List
; The name here must match the filename in conf/license or custom/conf/license
PREFERRED_LICENSES = Apache License 2.0,MIT License
PREFERRED_LICENSES = {{ ( gitea_reopsitory_preferred_licenses + gitea_reopsitory_preferred_licenses_additional) | join(",") }}
; Disable the ability to interact with repositories using the HTTP protocol
DISABLE_HTTP_GIT = false
DISABLE_HTTP_GIT = {{ gitea_repository_disable_http | ternary('true', 'false') }}
; Value for Access-Control-Allow-Origin header, default is not to present
; WARNING: This maybe harmful to you website if you do not give it a right value.
ACCESS_CONTROL_ALLOW_ORIGIN =
@ -37,93 +37,93 @@ ACCESS_CONTROL_ALLOW_ORIGIN =
USE_COMPAT_SSH_URI = false
; Close issues as long as a commit on any branch marks it as fixed
DEFAULT_CLOSE_ISSUES_VIA_COMMITS_IN_ANY_BRANCH = false
[repository.editor]
; List of file extensions for which lines should be wrapped in the CodeMirror editor
; Separate extensions with a comma. To line wrap files without an extension, just put a comma
LINE_WRAP_EXTENSIONS = .txt,.md,.markdown,.mdown,.mkd,
; Valid file modes that have a preview API associated with them, such as api/v1/markdown
; Separate the values by commas. The preview tab in edit mode won't be displayed if the file extension doesn't match
PREVIEWABLE_FILE_MODES = markdown
[repository.local]
; Path for local repository copy. Defaults to `tmp/local-repo`
LOCAL_COPY_PATH = tmp/local-repo
; Path for local wiki copy. Defaults to `tmp/local-wiki`
LOCAL_WIKI_PATH = tmp/local-wiki
[repository.upload]
; Whether repository file uploads are enabled. Defaults to `true`
ENABLED = true
; Path for uploads. Defaults to `data/tmp/uploads` (tmp gets deleted on gitea restart)
TEMP_PATH = data/tmp/uploads
; One or more allowed types, e.g. image/jpeg|image/png. Nothing means any file type
ALLOWED_TYPES =
; Max size of each file in megabytes. Defaults to 3MB
FILE_MAX_SIZE = 3
; Max number of files per upload. Defaults to 5
MAX_FILES = 5
ENABLE_PUSH_CREATE_USER = {{ gitea_repository_push_create_on_user }}
ENABLE_PUSH_CREATE_ORG = {{ gitea_repository_push_create_on_org }}
DISABLED_REPO_UNITS =
DEFAULT_REPO_UNITS =
PREFIX_ARCHIVE_FILES = yes
[repository.pull-request]
; List of prefixes used in Pull Request title to mark them as Work In Progress
WORK_IN_PROGRESS_PREFIXES=WIP:,[WIP]
WORK_IN_PROGRESS_PREFIXES = {{ ( gitea_pull_request_wip_prefixes + gitea_pull_request_wip_prefixes_additional ) | join(",") }}
CLOSE_KEYWORDS = {{ ( gitea_pull_request_close_keywords + gitea_pull_request_close_keywords_additional ) | join(",") }}
REOPEN_KEYWORDS = {{ ( gitea_pull_request_close_keywords + gitea_pull_request_close_keywords_additional ) | join(",") }}
DEFAULT_MERGE_MESSAGE_COMMITS_LIMIT = {{ gitea_pull_request_default_merge_message_commits_limit }}
DEFAULT_MERGE_MESSAGE_SIZE = {{ gitea_pull_request_default_merge_message_size }}
DEFAULT_MERGE_MESSAGE_ALL_AUTHORS = {{ gitea_pull_request_default_merge_message_all_authors | ternary('true', 'false') }}
DEFAULT_MERGE_MESSAGE_MAX_APPROVERS = {{ gitea_pull_request_default_merge_message_max_approvers }}
DEFAULT_MERGE_MESSAGE_OFFICIAL_APPROVERS_ONLY = {{ gitea_pull_request_default_merge_message_official_approvers_only | ternary('true', 'false') }}
[repository.issue]
; List of reasons why a Pull Request or Issue can be locked
LOCK_REASONS=Too heated,Off-topic,Resolved,Spam
[repository.signing]
SIGNING_KEY = default
; SIGNING_NAME given by git configuration
; SIGNING_EMAIL given by git configuration
INITIAL_COMMIT = {{ gitea_signing_initial_commit | join(",") }}
WIKI = {{ gitea_signing_wiki | join(",") }}
CRUD_ACTIONS = {{ gitea_signing_crud_actions | join(",") }}
MERGES = {{ gitea_signing_merges | join(",") }}
; TODO CORS
[ui]
; Number of repositories that are displayed on one explore page
EXPLORE_PAGING_NUM = 20
EXPLORE_PAGING_NUM = {{ gitea_ui_explore_paging }}
; Number of issues that are displayed on one page
ISSUE_PAGING_NUM = 10
ISSUE_PAGING_NUM = {{ gitea_ui_issue_paging }}
; Number of maximum commits displayed in one activity feed
FEED_MAX_COMMIT_NUM = 5
FEED_MAX_COMMIT_NUM = {{ gitea_ui_feed_max_commit }}
; Number of maximum commits displayed in commit graph.
GRAPH_MAX_COMMIT_NUM = 100
GRAPH_MAX_COMMIT_NUM = {{ gitea_ui_graph_max_commit }}
; Number of line of codes shown for a code comment
CODE_COMMENT_LINES = 4
CODE_COMMENT_LINES = {{ gitea_ui_code_comment_lines }}
; Value of `theme-color` meta tag, used by Android >= 5.0
; An invalid color like "none" or "disable" will have the default style
; More info: https://developers.google.com/web/updates/2014/11/Support-for-theme-color-in-Chrome-39-for-Android
THEME_COLOR_META_TAG = `#6cc644`
THEME_COLOR_META_TAG = `{{ gitea_ui_theme_color }}`
; Max size of files to be displayed (default is 8MiB)
MAX_DISPLAY_FILE_SIZE = 8388608
MAX_DISPLAY_FILE_SIZE = {{ gitea_ui_max_display_file }}
; Whether the email of the user should be shown in the Explore Users page
SHOW_USER_EMAIL = true
SHOW_USER_EMAIL = {{ gitea_ui_show_user_email | ternary('true', 'false') }}
; Set the default theme for the Gitea install
DEFAULT_THEME = arc-green
DEFAULT_THEME = {{ gitea_ui_default_theme }}
; All available themes. Allow users select personalized themes regardless of the value of `DEFAULT_THEME`.
THEMES = gitea,arc-green
THEMES = {{ ( gitea_ui_themes + gitea_ui_themes_additional ) | join(",") }}
REACTIONS = {{ ( gitea_ui_reactions + gitea_ui_reactions_additional ) | join(", ") }}
DEFAULT_SHOW_FULL_NAME = {{ gitea_ui_default_show_full_name | ternary('true', 'false') }}
SEARCH_REPO_DESCRIPTION = {{ gitea_ui_search_repo_description | ternary('true', 'false') }}
USE_SERVICE_WORKER = {{ gitea_ui_use_service_worker | ternary('true', 'false') }}
[ui.admin]
; Number of users that are displayed on one page
USER_PAGING_NUM = 50
USER_PAGING_NUM = {{ gitea_ui_admin_user_paging }}
; Number of repos that are displayed on one page
REPO_PAGING_NUM = 50
REPO_PAGING_NUM = {{ gitea_ui_admin_repo_paging }}
; Number of notices that are displayed on one page
NOTICE_PAGING_NUM = 25
NOTICE_PAGING_NUM = {{ gitea_ui_admin_notice_paging }}
; Number of organizations that are displayed on one page
ORG_PAGING_NUM = 50
ORG_PAGING_NUM = {{ gitea_ui_admin_org_paging }}
[ui.user]
; Number of repos that are displayed on one page
REPO_PAGING_NUM = 15
REPO_PAGING_NUM = {{ gitea_ui_user_repo_paging }}
[ui.meta]
AUTHOR = Gitea - Git with a cup of tea
DESCRIPTION = Gitea (Git with a cup of tea) is a painless self-hosted Git service written in Go
KEYWORDS = go,git,self-hosted,gitea
AUTHOR = `{{ gitea_ui_meta_author }}`
DESCRIPTION = `{{ gitea_ui_meta_description }}`
KEYWORDS = {{ ( gitea_ui_meta_keywords + gitea_ui_meta_keywords_additional ) | join(",") }}
[markdown]
; Enable hard line break extension
ENABLE_HARD_LINE_BREAK = false
ENABLE_HARD_LINE_BREAK = {{ gitea_markdown_hard_line_break | ternary('true', 'false') }}
; List of custom URL-Schemes that are allowed as links when rendering Markdown
; for example git,magnet
CUSTOM_URL_SCHEMES =
CUSTOM_URL_SCHEMES = {{ gitea_markdown_custom_url_schemes | join(',') }}
; List of file extensions that should be rendered/edited as Markdown
; Separate the extensions with a comma. To render files without any extension as markdown, just put a comma
FILE_EXTENSIONS = .md,.markdown,.mdown,.mkd
FILE_EXTENSIONS = {{ ( gitea_markdown_file_extensions + gitea_markdown_file_extensions_additional ) | product(['.']) | map('reverse') | map('join') | join(',') }}
[server]
; The protocol the server listens on. One of 'http', 'https', 'unix' or 'fcgi'.
@ -132,13 +132,6 @@ DOMAIN = {{ domain }}
ROOT_URL = https://%(DOMAIN)s/
; The address to listen on. Either a IPv4/IPv6 address or the path to a unix socket.
HTTP_ADDR = {{ gitea_socket_path }}
;HTTP_PORT = 3000
; If REDIRECT_OTHER_PORT is true, and PROTOCOL is set to https an http server
; will be started on PORT_TO_REDIRECT and it will redirect plain, non-secure http requests to the main
; ROOT_URL. Defaults are false for REDIRECT_OTHER_PORT and 80 for
; PORT_TO_REDIRECT.
REDIRECT_OTHER_PORT = false
PORT_TO_REDIRECT = 80
; Permission for unix socket
UNIX_SOCKET_PERMISSION = 666
; Local (DMZ) URL for Gitea workers (such as SSH update) accessing web service.
@ -150,30 +143,15 @@ UNIX_SOCKET_PERMISSION = 666
DISABLE_SSH = false
; Whether to use the builtin SSH server or not.
START_SSH_SERVER = false
; Username to use for the builtin SSH server. If blank, then it is the value of RUN_USER.
BUILTIN_SSH_SERVER_USER =
; Domain name to be exposed in clone URL
SSH_DOMAIN = %(DOMAIN)s
; The network interface the builtin SSH server should listen on
SSH_LISTEN_HOST =
; Port number to be exposed in clone URL
SSH_PORT = 22
; The port number the builtin SSH server should listen on
SSH_LISTEN_PORT = %(SSH_PORT)s
; Root path of SSH directory, default is '~/.ssh', but you have to use '/home/git/.ssh'.
SSH_ROOT_PATH = {{ gitea_user_directory }}/.ssh
; Gitea will create a authorized_keys file by default when it is not using the internal ssh server
; If you intend to use the AuthorizedKeysCommand functionality then you should turn this off.
SSH_CREATE_AUTHORIZED_KEYS_FILE = true
; For the built-in SSH server, choose the ciphers to support for SSH connections,
; for system SSH this setting has no effect
SSH_SERVER_CIPHERS = aes128-ctr, aes192-ctr, aes256-ctr, aes128-gcm@openssh.com, arcfour256, arcfour128
; For the built-in SSH server, choose the key exchange algorithms to support for SSH connections,
; for system SSH this setting has no effect
SSH_SERVER_KEY_EXCHANGES = diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, curve25519-sha256@libssh.org
; For the built-in SSH server, choose the MACs to support for SSH connections,
; for system SSH this setting has no effect
SSH_SERVER_MACS = hmac-sha2-256-etm@openssh.com, hmac-sha2-256, hmac-sha1, hmac-sha1-96
; Directory to create temporary files in when testing public keys using ssh-keygen,
; default is the system temporary directory.
SSH_KEY_TEST_PATH =
@ -186,7 +164,7 @@ SSH_EXPOSE_ANONYMOUS = false
; Indicate whether to check minimum key size with corresponding type
MINIMUM_KEY_SIZE_CHECK = false
; Disable CDN even in "prod" mode
OFFLINE_MODE = false
OFFLINE_MODE = {{ gitea_server_offline_mode | ternary('true', 'false') }}
DISABLE_ROUTER_LOG = false
; Root directory containing templates and static files.
; default is the path where Gitea is executed
@ -204,20 +182,24 @@ PPROF_DATA_PATH = data/tmp/pprof
; Landing page, can be "home", "explore", or "organizations"
LANDING_PAGE = home
; Enables git-lfs support. true or false, default is false.
LFS_START_SERVER = true
LFS_START_SERVER = {{ gitea_server_lfs_support | ternary('true', 'false') }}
; Where your lfs files reside, default is data/lfs.
LFS_CONTENT_PATH = data/lfs
LFS_CONTENT_PATH = {{ gitea_lfs_directory }}
; LFS authentication secret, change this yourself
LFS_JWT_SECRET = `{{ gitea_lfs_jwt_secret }}`
; LFS authentication validity period (in time.Duration), pushes taking longer than this may fail.
LFS_HTTP_AUTH_EXPIRY = 20m
LFS_HTTP_AUTH_EXPIRY = {{ gitea_server_lfs_auth_expiry }}
ALLOW_GRACEFUL_RESTARTS = false
GRACEFUL_HAMMER_TIME = 60s
STATIC_CACHE_TIME = 6h
; Define allowed algorithms and their minimum key length (use -1 to disable a type)
[ssh.minimum_key_sizes]
ED25519 = 256
ECDSA = 256
RSA = 2048
DSA = -1
ED25519 = {{ gitea_ssh_min_size_ed25519 }}
ECDSA = {{ gitea_ssh_min_size_ecdsa }}
RSA = {{ gitea_ssh_min_size_rsa }}
DSA = {{ gitea_ssh_min_size_dsa }}
[database]
; Either "mysql", "postgres", "mssql" or "sqlite3", it's your choice
@ -230,10 +212,7 @@ PASSWD = `{{ database_pass }}`
; For Postgres, either "disable" (default), "require", or "verify-full"
; For MySQL, either "false" (default), "true", or "skip-verify"
SSL_MODE = disable
; For "sqlite3" and "tidb", use an absolute path when you start gitea as service
PATH = data/gitea.db
; For "sqlite3" only. Query timeout
SQLITE_TIMEOUT = 500
CHARSET = utf8
; For iterate buffer, default is 50
ITERATE_BUFFER_SIZE = 50
; Show the database generated SQL
@ -242,13 +221,16 @@ LOG_SQL = true
DB_RETRIES = 10
; Backoff time per DB retry (time.Duration)
DB_RETRY_BACKOFF = 3s
MAX_IDLE_CONNS = 2
CONN_MAX_LIFETIME = 3s
MAX_OPEN_CONNS = 0
[indexer]
; Issue indexer type, currently support: bleve or db, default is bleve
ISSUE_INDEXER_TYPE = bleve
; Issue indexer storage path, available when ISSUE_INDEXER_TYPE is bleve
ISSUE_INDEXER_PATH = indexers/issues.bleve
; Issue indexer queue, currently support: channel or levelqueue, default is levelqueue
; Issue indexer queue, currently support: channel, levelqueue or redis, default is levelqueue
ISSUE_INDEXER_QUEUE_TYPE = levelqueue
; When ISSUE_INDEXER_QUEUE_TYPE is levelqueue, this will be the queue will be saved path,
; default is indexers/issues.queue
@ -257,16 +239,58 @@ ISSUE_INDEXER_QUEUE_DIR = indexers/issues.queue
ISSUE_INDEXER_QUEUE_CONN_STR = "addrs=127.0.0.1:6379 db=0"
; Batch queue number, default is 20
ISSUE_INDEXER_QUEUE_BATCH_NUMBER = 20
; Timeout the indexer if it takes longer than this to start.
; Set to zero to disable timeout.
STARTUP_TIMEOUT=30s
; repo indexer by default disabled, since it uses a lot of disk space
REPO_INDEXER_ENABLED = false
REPO_INDEXER_PATH = indexers/repos.bleve
UPDATE_BUFFER_LEN = 20
MAX_FILE_SIZE = 1048576
; A comma separated list of glob patterns (see https://github.com/gobwas/glob) to include
; in the index; default is empty
REPO_INDEXER_INCLUDE =
; A comma separated list of glob patterns to exclude from the index; ; default is empty
REPO_INDEXER_EXCLUDE =
[queue]
; Specific queues can be individually configured with [queue.name]. [queue] provides defaults
;
; General queue queue type, currently support: persistable-channel, channel, level, redis, dummy
; default to persistable-channel
TYPE = persistable-channel
; data-dir for storing persistable queues and level queues, individual queues will be named by their type
DATADIR = queues/
; Default queue length before a channel queue will block
LENGTH = 20
; Batch size to send for batched queues
BATCH_LENGTH = 20
; Connection string for redis queues this will store the redis connection string.
CONN_STR = "addrs=127.0.0.1:6379 db=0"
; Provide the suffix of the default redis queue name - specific queues can be overriden within in their [queue.name] sections.
QUEUE_NAME = "_queue"
; If the queue cannot be created at startup - level queues may need a timeout at startup - wrap the queue:
WRAP_IF_NECESSARY = true
; Attempt to create the wrapped queue at max
MAX_ATTEMPTS = 10
; Timeout queue creation
TIMEOUT = 15m30s
; Create a pool with this many workers
WORKERS = 1
; Dynamically scale the worker pool to at this many workers
MAX_WORKERS = 10
; Add boost workers when the queue blocks for BLOCK_TIMEOUT
BLOCK_TIMEOUT = 1s
; Remove the boost workers after BOOST_TIMEOUT
BOOST_TIMEOUT = 5m
; During a boost add BOOST_WORKERS
BOOST_WORKERS = 5
[admin]
; Disallow regular (non-admin) users from creating organizations.
DISABLE_REGULAR_ORG_CREATION = false
DISABLE_REGULAR_ORG_CREATION = {{ gitea_admin_disable_org_creation | ternary('true', 'false') }}
DEFAULT_EMAIL_NOTIFICATIONS = {{ gitea_admin_default_email_notifications }}
[security]
; Whether the installer is disabled
@ -276,18 +300,22 @@ INTERNAL_TOKEN = `{{ gitea_internal_token }}`
; !!CHANGE THIS TO KEEP YOUR USER DATA SAFE!!
SECRET_KEY = `{{ gitea_cookie_secret }}`
; How long to remember that an user is logged in before requiring relogin (in days)
LOGIN_REMEMBER_DAYS = 7
LOGIN_REMEMBER_DAYS = {{ gitea_security_login_remember }}
COOKIE_USERNAME = gitea_awesome
COOKIE_REMEMBER_NAME = gitea_incredible
; Reverse proxy authentication header name of user name
REVERSE_PROXY_AUTHENTICATION_USER = X-WEBAUTH-USER
REVERSE_PROXY_AUTHENTICATION_EMAIL = X-WEBAUTH-EMAIL
; The minimum password length for new Users
MIN_PASSWORD_LENGTH = 8
MIN_PASSWORD_LENGTH = {{ gitea_security_min_password }}
; Set to true to allow users to import local server paths
IMPORT_LOCAL_PATHS = false
; Set to true to prevent all users (including admin) from creating custom git hooks
DISABLE_GIT_HOOKS = true
DISABLE_GIT_HOOKS = {{ gitea_security_disable_git_hooks | ternary('true', 'false') }}
ONLY_ALLOW_PUSH_IF_GITEA_ENVIRONMENT_SET = true
PASSWORD_COMPLEXITY = {{ gitea_security_password_complexity | join(',') }}
PASSWORD_HASH_ALGO = pbkdf2
CSRF_COOKIE_HTTP_ONLY = true
[openid]
;
@ -316,12 +344,12 @@ ENABLE_OPENID_SIGNIN = true
; Space separated.
; Only these would be allowed if non-blank.
; Example value: trusted.domain.org trusted.domain.net
WHITELISTED_URIS =
WHITELISTED_URIS = {{ gitea_openid_whitelisted_urls }}
; Forbidden URI patterns (POSIX regexp).
; Space separated.
; Only used if WHITELISTED_URIS is blank.
; Example value: loadaverage.org/badguy stackexchange.com/.*spammer
BLACKLISTED_URIS =
BLACKLISTED_URIS = {{ gitea_openid_blacklisted_urls }}
[service]
; Time limit to confirm account/email registration
@ -338,9 +366,10 @@ DISABLE_REGISTRATION = true
; Allow registration only using third-party services, it works only when DISABLE_REGISTRATION is false
ALLOW_ONLY_EXTERNAL_REGISTRATION = false
; User must sign in to view anything.
REQUIRE_SIGNIN_VIEW = false
REQUIRE_SIGNIN_VIEW = {{ gitea_service_require_signin | ternary('true', 'false') }}
; Mail notification
ENABLE_NOTIFY_MAIL = false
ENABLE_BASIC_AUTHENTICATION = true
; More detail: https://github.com/gogits/gogs/issues/165
ENABLE_REVERSE_PROXY_AUTHENTICATION = false
ENABLE_REVERSE_PROXY_AUTO_REGISTRATION = false
@ -355,38 +384,40 @@ RECAPTCHA_SECRET =
RECAPTCHA_SITEKEY =
; Default value for KeepEmailPrivate
; Each new user will get the value of this setting copied into their profile
DEFAULT_KEEP_EMAIL_PRIVATE = false
DEFAULT_KEEP_EMAIL_PRIVATE = {{ gitea_service_default_email_private | ternary('true', 'false') }}
; Default value for AllowCreateOrganization
; Every new user will have rights set to create organizations depending on this setting
DEFAULT_ALLOW_CREATE_ORGANIZATION = true
DEFAULT_ALLOW_CREATE_ORGANIZATION = {{ gitea_service_default_allow_create_org | ternary('true', 'false') }}
; Either "public", "limited" or "private", default is "public"
; Limited is for signed user only
; Private is only for member of the organization
; Public is for everyone
DEFAULT_ORG_VISIBILITY = public
DEFAULT_ORG_VISIBILITY = {{ gitea_service_default_org_visibility }}
DEFAULT_ORG_MEMBER_VISIBLE = {{ gitea_service_default_org_member_visible | ternary('true', 'false') }}
; Default value for EnableDependencies
; Repositories will use dependencies by default depending on this setting
DEFAULT_ENABLE_DEPENDENCIES = true
; Enable heatmap on users profiles.
ENABLE_USER_HEATMAP = true
ENABLE_USER_HEATMAP = {{ gitea_service_enable_user_heatmap | ternary('true', 'false') }}
; Enable Timetracking
ENABLE_TIMETRACKING = true
ENABLE_TIMETRACKING = {{ gitea_service_enable_timetracking | ternary('true', 'false') }}
; Default value for EnableTimetracking
; Repositories will use timetracking by default depending on this setting
DEFAULT_ENABLE_TIMETRACKING = true
DEFAULT_ENABLE_TIMETRACKING = {{ gitea_service_default_enable_timetracking | ternary('true', 'false') }}
; Default value for AllowOnlyContributorsToTrackTime
; Only users with write permissions can track time if this is true
DEFAULT_ALLOW_ONLY_CONTRIBUTORS_TO_TRACK_TIME = true
DEFAULT_ALLOW_ONLY_CONTRIBUTORS_TO_TRACK_TIME = {{ gitea_service_default_timetracking_contributers_only | ternary('true', 'false') }}
; Default value for the domain part of the user's email address in the git log
; if he has set KeepEmailPrivate to true. The user's email will be replaced with a
; concatenation of the user name in lower case, "@" and NO_REPLY_ADDRESS.
NO_REPLY_ADDRESS = noreply.example.org
NO_REPLY_ADDRESS = noreply.%(DOMAIN)s
; Show Registration button
SHOW_REGISTRATION_BUTTON = true
SHOW_REGISTRATION_BUTTON = {{ gitea_service_default_enable_timetracking | ternary('true', 'false') }}
; Default value for AutoWatchNewRepos
; When adding a repo to a team or creating a new repo all team members will watch the
; repo automatically if enabled
AUTO_WATCH_NEW_REPOS = true
AUTO_WATCH_NEW_REPOS = {{ gitea_service_default_enable_timetracking | ternary('true', 'false') }}
AUTO_WATCH_ON_CHANGES = {{ gitea_service_default_enable_timetracking | ternary('true', 'false') }}
[webhook]
; Hook task queue length, increase if webhook shooting starts hanging
@ -397,6 +428,10 @@ DELIVER_TIMEOUT = 5
SKIP_TLS_VERIFY = false
; Number of history information in each page
PAGING_NUM = 10
; Proxy server URL, support http://, https//, socks://, blank will follow environment http_proxy/https_proxy
PROXY_URL =
; Comma separated list of host names requiring proxy. Glob patterns (*) are accepted; use ** to match all hosts.
PROXY_HOSTS =
[mailer]
ENABLED = false
@ -437,6 +472,7 @@ SENDMAIL_PATH = sendmail
SENDMAIL_ARGS =
[cache]
ENABLED = true
; Either "memory", "redis", or "memcache", default is "memory"
ADAPTER = memory
; For "memory" only, GC interval in seconds, default is 60
@ -449,6 +485,16 @@ HOST =
; Setting it to 0 disables caching
ITEM_TTL = 16h
; Last commit cache
[cache.last_commit]
; if the cache enabled
ENABLED = true
; Time to keep items in cache if not used, default is 8760 hours.
; Setting it to 0 disables caching
ITEM_TTL = 8760h
; Only enable the cache when repository's commits count great than
COMMITS_COUNT = 1000
[session]
; Either "memory", "file", or "redis", default is "memory"
PROVIDER = memory
@ -471,37 +517,42 @@ SESSION_LIFE_TIME = 86400
[picture]
AVATAR_UPLOAD_PATH = data/avatars
REPOSITORY_AVATAR_UPLOAD_PATH = data/repo-avatars
REPOSITORY_AVATAR_FALLBACK = none
REPOSITORY_AVATAR_FALLBACK_IMAGE = /img/repo_default.png
; Max Width and Height of uploaded avatars. This is to limit the amount of RAM
; used when resizing the image.
AVATAR_MAX_WIDTH = 4096
AVATAR_MAX_HEIGHT = 3072
AVATAR_MAX_WIDTH = {{ gitea_picture_avatar_max_width }}
AVATAR_MAX_HEIGHT = {{ gitea_picture_avatar_max_height }}
AVATAR_MAX_FILE_SIZE = {{ gitea_picture_avatar_max_size }}
; Chinese users can choose "duoshuo"
; or a custom avatar source, like: http://cn.gravatar.com/avatar/
GRAVATAR_SOURCE = gravatar
GRAVATAR_SOURCE = {{ gitea_picture_gravatar_source }}
; This value will always be true in offline mode.
DISABLE_GRAVATAR = false
DISABLE_GRAVATAR = {{ gitea_picture_disable_gravatar | ternary('true', 'false') }}
; Federated avatar lookup uses DNS to discover avatar associated
; with emails, see https://www.libravatar.org
; This value will always be false in offline mode or when Gravatar is disabled.
ENABLE_FEDERATED_AVATAR = false
ENABLE_FEDERATED_AVATAR = {{ gitea_picture_enable_federated_avatar | ternary('true', 'false') }}
[attachment]
; Whether attachments are enabled. Defaults to `true`
ENABLED = true
ENABLED = {{ gitea_attachment_enabled | ternary('true', 'false') }}
; Path for attachments. Defaults to `data/attachments`
PATH = data/attachments
; One or more allowed types, e.g. image/jpeg|image/png
ALLOWED_TYPES = image/jpeg|image/png|application/zip|application/gzip
ALLOWED_TYPES = {{ ( gitea_attachment_allowed_types + gitea_attachment_allowed_types_additional ) | join('|') }}
; Max size of each file. Defaults to 4MB
MAX_SIZE = 4
MAX_SIZE = {{ gitea_attachment_max_size }}
; Max number of files per upload. Defaults to 5
MAX_FILES = 5
MAX_FILES = {{ gitea_attachment_max_files }}
[time]
; Specifies the format for fully outputted dates. Defaults to RFC1123
; Special supported values are ANSIC, UnixDate, RubyDate, RFC822, RFC822Z, RFC850, RFC1123, RFC1123Z, RFC3339, RFC3339Nano, Kitchen, Stamp, StampMilli, StampMicro and StampNano
; For more information about the format see http://golang.org/pkg/time/#pkg-constants
FORMAT =
DEFAULT_UI_LOCATION =
[log]
ROOT_PATH =
@ -638,6 +689,7 @@ MAX_GIT_DIFF_FILES = 100
; Arguments for command 'git gc', e.g. "--aggressive --auto"
; see more on http://git-scm.com/docs/git-gc/
GC_ARGS =
EnableAutoGitWireProtocol = true
; Operation timeout in seconds
[git.timeout]
@ -722,9 +774,9 @@ SHOW_FOOTER_VERSION = false
SHOW_FOOTER_TEMPLATE_LOAD_TIME = false
[markup.asciidoc]
ENABLED = false
ENABLED = {{ gitea_markup_asciidoc_enabled | ternary('true', 'false') }}
; List of file extensions that should be rendered by an external command
FILE_EXTENSIONS = .adoc,.asciidoc
FILE_EXTENSIONS = {{ (gitea_markup_asciidoc_extensions + gitea_markup_asciidoc_extensions_additional) | product(['.']) | map('reverse') | map('join') | join(',') }}
; External command to render all matching extensions
RENDER_COMMAND = "asciidoc --out-file=- -"
; Don't pass the file on STDIN, pass the filename as argument instead.
@ -735,3 +787,18 @@ IS_INPUT_FILE = false
ENABLED = false
; If you want to add authorization, specify a token here
TOKEN =
[task]
; Task queue type, could be `channel` or `redis`.
QUEUE_TYPE = channel
; Task queue length, available only when `QUEUE_TYPE` is `channel`.
QUEUE_LENGTH = 1000
; Task queue connection string, available only when `QUEUE_TYPE` is `redis`.
; If there is a password of redis, use `addrs=127.0.0.1:6379 password=123 db=0`.
QUEUE_CONN_STR = "addrs=127.0.0.1:6379 db=0"
[migrations]
; Max attempts per http/https request on migrations.
MAX_ATTEMPTS = 3
; Backoff time per http/https request retry (seconds)
RETRY_BACKOFF = 3

Loading…
Cancel
Save