tegwick
3e211a1cb4
Use PROTOCOL=smtp+starttls with the EU relay (smtp.ionos.de). Port 587 with implicit TLS on smtp.ionos.com failed TLS handshake; .com auth also fails for EU mailboxes. Document OpenBao PASSWD field mapping in operator docs.
68 lines
No EOL
1.6 KiB
YAML
68 lines
No EOL
1.6 KiB
YAML
# Non-secret Forgejo Helm values (gitea-charts/gitea chart + Forgejo image).
|
|
# Layer helm/forgejo-secrets.sops.yaml for database password and admin credentials.
|
|
# Recreate avoids leveldb queue lock fights on the shared RWO PVC during upgrades.
|
|
strategy:
|
|
type: Recreate
|
|
|
|
service:
|
|
http:
|
|
type: ClusterIP
|
|
|
|
image:
|
|
registry: code.forgejo.org
|
|
repository: forgejo/forgejo
|
|
tag: "11.0.3"
|
|
rootless: true
|
|
|
|
persistence:
|
|
enabled: true
|
|
size: 10Gi
|
|
|
|
postgresql:
|
|
enabled: false
|
|
|
|
postgresql-ha:
|
|
enabled: false
|
|
|
|
redis-cluster:
|
|
enabled: false
|
|
|
|
valkey-cluster:
|
|
enabled: false
|
|
|
|
gitea:
|
|
admin:
|
|
username: forgejo_admin
|
|
email: admin@coulomb.social
|
|
passwordMode: initialOnlyRequireReset
|
|
# Mailer password from OpenBao via ExternalSecret forgejo-mailer (not Helm/SOPS).
|
|
additionalConfigFromEnvs:
|
|
- name: GITEA__mailer__PASSWD
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: forgejo-mailer
|
|
key: MAILER_PASSWD
|
|
config:
|
|
database:
|
|
DB_TYPE: postgres
|
|
HOST: forgejo-db-rw.databases.svc.cluster.local:5432
|
|
NAME: forgejo
|
|
USER: forgejo
|
|
server:
|
|
DOMAIN: forgejo.coulomb.social
|
|
SSH_DOMAIN: forgejo.coulomb.social
|
|
SSH_PORT: 22
|
|
SSH_LISTEN_PORT: 2222
|
|
DISABLE_SSH: false
|
|
service:
|
|
DISABLE_REGISTRATION: true
|
|
mailer:
|
|
ENABLED: true
|
|
FROM: forgejo@coulomb.social
|
|
# IONOS submission port 587 uses STARTTLS, not implicit TLS (smtps).
|
|
PROTOCOL: smtp+starttls
|
|
SMTP_ADDR: smtp.ionos.de
|
|
SMTP_PORT: 587
|
|
USER: forgejo@coulomb.social
|
|
actions:
|
|
ENABLED: true |