fix: Gitea | use non tls internally

This commit is contained in:
2025-11-22 05:04:56 +05:00
parent 11bf756add
commit 7a03874033

View File

@@ -15,7 +15,6 @@ ingress:
cert-manager.io/cluster-issuer: cloudflare-issuer cert-manager.io/cluster-issuer: cloudflare-issuer
cert-manager.io/acme-challenge-type: dns01 cert-manager.io/acme-challenge-type: dns01
cert-manager.io/private-key-size: 4096 cert-manager.io/private-key-size: 4096
traefik.io/service.scheme: https
className: traefik className: traefik
hosts: hosts:
- host: git.dogar.dev - host: git.dogar.dev
@@ -42,9 +41,6 @@ gitea:
ENABLE_GZIP: true ENABLE_GZIP: true
LFS_START_SERVER: true LFS_START_SERVER: true
SSH_DOMAIN: git.dogar.dev SSH_DOMAIN: git.dogar.dev
PROTOCOL: https
CERT_FILE: /opt/gitea/tls/cert.pem
KEY_FILE: /opt/gitea/tls/key.pem
database: database:
DB_TYPE: postgres DB_TYPE: postgres
HOST: postgres-cluster-rw HOST: postgres-cluster-rw
@@ -84,21 +80,6 @@ gitea:
autoDiscoverUrl: "https://auth.dogar.dev/application/o/gitea/.well-known/openid-configuration" autoDiscoverUrl: "https://auth.dogar.dev/application/o/gitea/.well-known/openid-configuration"
iconUrl: "https://goauthentik.io/img/icon.png" iconUrl: "https://goauthentik.io/img/icon.png"
scopes: "email profile" scopes: "email profile"
livenessProbe:
enabled: true
scheme: HTTPS
tcpSocket:
port: http
readinessProbe:
enabled: true
scheme: HTTPS
tcpSocket:
port: http
startupProbe:
enabled: true
scheme: HTTPS
tcpSocket:
port: http
additionalConfigFromEnvs: additionalConfigFromEnvs:
- name: GITEA__MAILER__PASSWD - name: GITEA__MAILER__PASSWD
valueFrom: valueFrom:
@@ -161,16 +142,6 @@ extraVolumes:
items: items:
- key: ca.crt - key: ca.crt
path: root.crt path: root.crt
- name: tls-bundle
projected:
sources:
- secret:
name: gitea-tls
items:
- key: tls.crt
path: cert.pem
- key: tls.key
path: key.pem
- name: gitea-temp - name: gitea-temp
emptyDir: {} emptyDir: {}
extraInitVolumeMounts: extraInitVolumeMounts:
@@ -181,8 +152,6 @@ extraContainerVolumeMounts:
- name: ssl-bundle - name: ssl-bundle
mountPath: /opt/gitea/.postgresql mountPath: /opt/gitea/.postgresql
readOnly: true readOnly: true
- name: tls-bundle
mountPath: /opt/gitea/tls
readOnly: true readOnly: true
- name: gitea-temp - name: gitea-temp
mountPath: /tmp/gitea-uploads mountPath: /tmp/gitea-uploads