---

allow_duplicates: yes

dependencies:
  - role: misc/handlers
  - role: misc/backup_files
    # domain
    backup_directory: "{{ gitea_repositories_directory }}"
  - role: misc/hdd_dir
    # domain
    hdd_source_dir: "{{ gitea_data_directory }}"
  - role: fail2ban/rule
    # domain
    unit_name: "{{ gitea_service_name }}"
    fail_regex:
      - '.* Failed authentication attempt for .* from <HOST>$'
    max_retries: 8
    find_time: "{{ 60 * 60 }}"
    ban_time: "{{ 60 * 60 }}"
  - role: mysql/database
    # database_user
  - role: nginx/proxy
    # domain
    backend_socket: "{{ gitea_socket_path }}"