Trez/tar-valon-ansible
4
0
Fork 0
Code Issues 1 Pull Requests Actions Activity

Hashicorp Vault lookup overhaul.
Gitea Branch PR & Ansible Deployment / Ansible Dry Run (lunafreya) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Dry Run (rikku) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Dry Run (rinoa) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Dry Run (ultima) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Config Deployment (lunafreya) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Config Deployment (rikku) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Config Deployment (rinoa) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Ansible Config Deployment (ultima) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / Check and Create PR (push) Successful in 16s
Details
Gitea Branch PR & Ansible Deployment / Ansible Dry Run (aranea) (push) Failing after 2m20s
Details
Gitea Branch PR & Ansible Deployment / Ansible Config Deployment (aranea) (push) Has been skipped
Details
Gitea Branch PR & Ansible Deployment / PR Merge (push) Has been skipped
Details

Browse Source
This commit is contained in:
Trez.One
2026-07-13 11:23:42 -04:00
parent c96e822a0b
commit 4241fd0030
42 changed files with 127 additions and 111 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app-configs/rinoa/gitea/conf/app.ini.j2
+5 -5
View File
@@ -27,7 +27,7 @@ DISABLE_SSH = false
SSH_PORT = 22
SSH_LISTEN_PORT = 22
LFS_START_SERVER = true
LFS_JWT_SECRET = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['GITEA_LFS_JWT_SECRET'] }}
LFS_JWT_SECRET = {{ vault.kv2_field('env','GITEA_LFS_JWT_SECRET', vault_engine_mount_point) }}
OFFLINE_MODE = true
[database]
@@ -36,7 +36,7 @@ DB_TYPE = postgres
HOST = gitea-db:5432
NAME = gitea
USER = gitea
PASSWD = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['GITEA_PG_DB_PASSWORD'] }}
PASSWD = {{ vault.kv2_field('env','GITEA_PG_DB_PASSWORD', vault_engine_mount_point) }}
LOG_SQL = false
SCHEMA =
SSL_MODE = disable
@@ -70,7 +70,7 @@ INSTALL_LOCK = true
SECRET_KEY =
REVERSE_PROXY_LIMIT = 1
REVERSE_PROXY_TRUSTED_PROXIES = *
INTERNAL_TOKEN = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['GITEA_INTERNAL_TOKEN'] }}
INTERNAL_TOKEN = {{ vault.kv2_field('env','GITEA_INTERNAL_TOKEN', vault_engine_mount_point) }}
PASSWORD_HASH_ALGO = pbkdf2
[service]
@@ -89,7 +89,7 @@ NO_REPLY_ADDRESS = noreply@trez.wtf
PATH = /data/git/lfs
[mailer]
PASSWD = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['POSTAL_SMTP_AUTH_PASSWORD'] }}
PASSWD = {{ vault.kv2_field('env','POSTAL_SMTP_AUTH_PASSWORD', vault_engine_mount_point) }}
PROTOCOL = smtp
ENABLED = true
FROM = '"Gitea" <noreply@trez.wtf>'
@@ -112,7 +112,7 @@ DEFAULT_MERGE_STYLE = merge
DEFAULT_TRUST_MODEL = committer
[oauth2]
JWT_SECRET = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token)['secret']['GITEA_OAUTH2_JWT_SECRET'] }}
JWT_SECRET = {{ vault.kv2_field('env','GITEA_OAUTH2_JWT_SECRET', vault_engine_mount_point) }}
[ui]
THEMES = gitea-auto,catppuccin-blue-auto,catppuccin-flamingo-auto,catppuccin-green-auto,catppuccin-lavender-auto,catppuccin-mauve-auto,catppuccin-peach-auto,catppuccin-pink-auto,catppuccin-red-auto,catppuccin-rosewater-auto,catppuccin-sapphire-auto,catppuccin-sky-auto,catppuccin-teal-auto,catppuccin-yellow-auto,catppuccin-maroon-auto