6 Commits

Author SHA1 Message Date
6c837c7de8 chore: Upgrade Gitea to 1.26.0 with Robot API
- Update Gitea image from 1.22.6 to 1.26.0
- Switch to ghcr.io/terraphim/gitea registry
- Add Robot API configuration section
- Enable PageRank algorithm with damping=0.85, iterations=100
- Enable audit logging for Robot API access

Related to #8
2026-03-10 21:25:25 +00:00
b7c8795157 gitea hardened
Signed-off-by: Alex Mikhalev <alex@metacortex.engineer>
2026-02-26 10:33:51 +01:00
Alex
e999ed9a4e Add S3 storage config for attachments, pictures, and LFS 2026-02-16 21:05:24 +00:00
Alex
d2c28a91e6 fix: Update S3 config and add Gitea URL settings
- Change MINIO_ENDPOINT from IP to Docker hostname (s3storage)
- Add ROOT_URL and DOMAIN settings for proper Gitea configuration
- Give anonymous users Admin permission for bucket creation
- Document SeaweedFS bucket creation process
2026-02-16 20:33:21 +00:00
Alex
b9e307bcc8 fix: Remove user directive from compose template
The user: "1000:1000" directive was causing permission issues
with the s6-svscan service. Gitea runs fine without it.
2026-02-16 20:14:22 +00:00
Alex
4a4a0351aa feat: Gitea deployment with 1Password and Caddy
Complete infrastructure deployment including:
- Docker Compose templates with 1Password integration (op://)
- Caddy reverse proxy configuration for git.terraphim.cloud
- Automated deployment script (deploy-to-bigbox.sh)
- Comprehensive documentation and deployment article
- Network isolation: Public (Gitea) + Tailscale (Prometheus/S3)
- Security: No hardcoded secrets, all via 1Password

Services deployed:
- Gitea 1.22.6 (Git hosting)
- PostgreSQL 15 (Database)
- SeaweedFS (S3-compatible storage)
- Prometheus (Monitoring)

Excludes:
- docker-compose.yml (contains resolved secrets)
- s3_config.json (contains resolved secrets)
- Data directories (gitea/, postgres/, seaweedfs/)

Refs: Private deployment on bigbox with TerraphimPlatform vault
2026-02-16 19:40:19 +00:00