Files

Joakim ddbdefd27f Add self-contained Gitea Git service with PostgreSQL integration

- Implements complete Gitea Git service following rick-infra self-contained architecture
- Uses PostgreSQL infrastructure role as dependency and manages own database/user
- Native Arch Linux installation via pacman packages
- Automatic database setup (gitea database and user creation)
- SystemD service with security hardening and proper dependency management
- Caddy reverse proxy integration deployed to sites-enabled directory
- SSH server on port 2222 with automatic host key generation
- Production-ready with LFS support, security headers, and HTTPS via Caddy
- Follows simplified configuration approach with essential variables only
- Self-contained pattern: service manages complete setup independently

2025-11-18 22:33:56 +01:00

2.0 KiB

Raw Blame History

Gitea Git Service Role

Self-contained Gitea Git service for rick-infra following the established architectural patterns.

Features

✅ Self-contained: Manages its own database and configuration
✅ Native Arch installation: Uses pacman packages
✅ PostgreSQL integration: Uses shared PostgreSQL infrastructure
✅ Caddy integration: Deploys reverse proxy configuration
✅ Security hardened: SystemD restrictions and secure defaults
✅ Production ready: HTTPS, SSH access, LFS support

Architecture

Dependencies: PostgreSQL infrastructure role
Database: Self-managed gitea database and user
Network: HTTP on :3000, SSH on :2222 (localhost)
Web access: https://git.domain.com (via Caddy)
SSH access: ssh://git@git.domain.com:2222

Configuration

Key variables (defaults in defaults/main.yml):

# Service
gitea_service_enabled: true
gitea_http_port: 3000
gitea_ssh_port: 2222

# Domain 
gitea_subdomain: "git"
gitea_domain: "{{ caddy_domain }}"

# Database (self-managed)
gitea_db_name: "gitea"
gitea_db_user: "gitea" 
gitea_db_password: "{{ vault_gitea_db_password }}"

# Application
gitea_app_name: "Gitea: Git with a cup of tea"
gitea_disable_registration: false
gitea_enable_lfs: true

Usage

Add vault password: Set vault_gitea_db_password in host_vars vault
Deploy: ansible-playbook site.yml --tags gitea
Access: Visit https://git.yourdomain.com to set up admin account

Dependencies

PostgreSQL infrastructure role (auto-included)
Caddy web server (for HTTPS access)
Vault password: vault_gitea_db_password

Self-Contained Design

This role follows rick-infra's self-contained service pattern:

Creates its own database and user via PostgreSQL infrastructure
Manages its own configuration and data
Deploys its own Caddy reverse proxy config
Independent lifecycle from other services

Rick-Infra Gitea Service
Git repository management with integrated CI/CD capabilities.

2.0 KiB Raw Blame History