railiance-apps/helm/forgejo-secrets.sops.yaml.template

# Encrypt as helm/forgejo-secrets.sops.yaml before production deploy.
# Contains database PASSWD and admin password consumed by the gitea chart.
# IONOS SMTP password lives in OpenBao platform/workloads/forgejo/forgejo-mailer
# and is synced by manifests/forgejo-mailer-externalsecret.yaml.
#
# gitea:
#   admin:
#     password: <generated>
#   config:
#     database:
#       PASSWD: <same as forgejo-db-credentials>
gitea:
  admin:
    password: REPLACE_WITH_ADMIN_PASSWORD
  config:
    database:
      PASSWD: REPLACE_WITH_DB_PASSWORD
Deploy Forgejo on railiance01 using gitea-charts/gitea 12.5.0 Pin chart to 12.5.0 because 12.6+ calls `gitea config edit-ini`, which Forgejo 11 lacks. Ingress targets forgejo-gitea-http (Helm release naming). Smoke test uses GET for /v2/ registry challenge (HEAD returns 405). 2026-07-03 21:28:32 +02:00			`# Encrypt as helm/forgejo-secrets.sops.yaml before production deploy.`
Wire Forgejo SMTP password from OpenBao via External Secrets Add forgejo-mailer ExternalSecret, inject GITEA__mailer__PASSWD from the synced Secret, remove mailer from SOPS overlay, and add ESO bootstrap targets. 2026-07-07 14:30:02 +02:00			`# Contains database PASSWD and admin password consumed by the gitea chart.`
			`# IONOS SMTP password lives in OpenBao platform/workloads/forgejo/forgejo-mailer`
			`# and is synced by manifests/forgejo-mailer-externalsecret.yaml.`
Deploy Forgejo on railiance01 using gitea-charts/gitea 12.5.0 Pin chart to 12.5.0 because 12.6+ calls `gitea config edit-ini`, which Forgejo 11 lacks. Ingress targets forgejo-gitea-http (Helm release naming). Smoke test uses GET for /v2/ registry challenge (HEAD returns 405). 2026-07-03 21:28:32 +02:00			`#`
			`# gitea:`
			`# admin:`
			`# password: <generated>`
			`# config:`
			`# database:`
			`# PASSWD: <same as forgejo-db-credentials>`
			`gitea:`
			`admin:`
			`password: REPLACE_WITH_ADMIN_PASSWORD`
			`config:`
			`database:`
Wire Forgejo SMTP password from OpenBao via External Secrets Add forgejo-mailer ExternalSecret, inject GITEA__mailer__PASSWD from the synced Secret, remove mailer from SOPS overlay, and add ESO bootstrap targets. 2026-07-07 14:30:02 +02:00			`PASSWD: REPLACE_WITH_DB_PASSWORD`