---
gitea_version: 1.9.0
gitea_user: "gitea_adm"
gitea_user_home: "/home/{{ gitea_user }}"
gitea_group: "{{ gitea_user }}"
gitea_extra_groups: []

gitea_packages:
  - git

gitea_base_dir: "/opt/gitea"
gitea_bin_dir: "{{ gitea_base_dir }}/bin"
gitea_config_dir: "{{ gitea_base_dir }}/custom/conf"
gitea_data_dir: "{{ gitea_base_dir }}/data"

gitea_bind_ip: 127.0.0.1
gitea_bind_port: 61000
gitea_listen_address: http://gitea.example.com

gitea_install_lock: "true"
# @var gitea_secret:description: Should be replaced by your own secret.
gitea_secret: "1234567ABCDEFG"
# @var gitea_token:description: Should be replaced by your own secret.
gitea_token: "akslkaldasasifiuvsiasfa7s7f8as7f8asd"
gitea_run_mode: prod
gitea_landing_page: explore
gitea_disable_registration: "true"

gitea_db_type: pgsql
gitea_db_server: "{{ inventory_hostname }}"
gitea_db_port: 5432
gitea_db_name: gitea
gitea_db_user: pggitea
gitea_db_password: secret

gitea_db_ssl_mode: disabled

gitea_iptables_enabled: False
gitea_open_ports:
  - name: allow_gitea_web
    rules: |
      -A INPUT -m state --state NEW -p tcp --dport {{ gitea_bind_port }} -j ACCEPT
    state: present

gitea_global_log_level: Info
gitea_global_log_dir: "{{ gitea_base_dir }}/log"
gitea_file_log_level: "{{ gitea_global_log_level }}"
gitea_file_log_rotate_enabled: "true"
gitea_file_log_rotate_daily_enabled: "true"
gitea_file_log_rotate_max_days: 7

gitea_repository_upload_max_filesize: 3
gitea_repository_upload_max_files: 5
gitea_attachment_max_filesize: 3
gitea_attachment_max_files: 5

gitea_mail_service_enabled: False
gitea_mail_service_from: '"System" <systemmail@example.com>'
gitea_no_reply_address: noreply.example.org

gitea_oauth_provider_enabled: False
gitea_access_token_expiration_time: 3600
gitea_refresh_token_expiration_time: 730
gitea_invalidate_refresh_tokens: "false"
# @bar gitea_jwt_secret:description: >
# OAuth2 authentication secret for access and refresh tokens.
# Should be replaced by your own secret.
# @end
gitea_jwt_secret: Bk0yK7Y9g_p56v86KaHqjSbxvNvu3SbKoOdOt2ZcXvU

gitea_tls_enabled: False
gitea_tls_cert_path: "{{ gitea_base_dir }}/tls/certs/mycert.pem"
gitea_tls_key_path: "{{ gitea_base_dir }}/tls/private/mykey.pem"
gitea_tls_cert_source: mycert.pem
gitea_tls_key_source: mykey.pem