feat: initial codebase

applications/gitea/helmfile.yaml

@@ -0,0 +1,12 @@
+---
+repositories:
+  - name: gitea-charts
+    url: https://dl.gitea.io/charts/
+
+releases:
+  - name: gitea
+    namespace: nt
+    chart: gitea-charts/gitea
+    version: 8.3.0
+    values:
+      - values.yaml

applications/gitea/values.yaml

@@ -0,0 +1,71 @@
+# Gitea Helm values
+gitea:
+  admin:
+    username: gitea_admin
+    password: "{{ env "GITEA_ADMIN_PASSWORD" }}"
+    email: "admin@example.com"
+
+  config:
+    APP_NAME: "Gitea: Git with a cup of tea"
+    RUN_MODE: prod
+    server:
+      SSH_DOMAIN: gitea.nationtech.io
+      DOMAIN: gitea.nationtech.io
+      ROOT_URL: https://gitea.nationtech.io
+      DISABLE_SSH: false
+      START_SSH_SERVER: true
+      SSH_PORT: 22
+      SSH_LISTEN_PORT: 22
+    database:
+      DB_TYPE: postgres
+      HOST: postgresql:5432
+      NAME: gitea
+      USER: gitea
+      PASSWD: "{{ env "GITEA_DB_PASSWORD" }}"
+    service:
+      DISABLE_REGISTRATION: true
+    security:
+      INSTALL_LOCK: true
+      SECRET_KEY: "{{ env "GITEA_SECRET_KEY" }}"
+    webhook:
+      ALLOWED_HOST_LIST: woodpecker.nationtech.io
+
+  persistence:
+    enabled: true
+    size: 10Gi
+
+  ingress:
+    enabled: true
+    annotations:
+      kubernetes.io/ingress.class: nginx
+      cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    hosts:
+      - host: gitea.nationtech.io
+        paths:
+          - path: /
+            pathType: Prefix
+    tls:
+     - secretName: gitea-tls
+       hosts:
+         - gitea.nationtech.io
+
+postgresql:
+  enabled: true
+  global:
+    postgresql:
+      auth:
+        username: gitea
+        password: "{{ env "GITEA_DB_PASSWORD" }}"
+        database: gitea
+  primary:
+    persistence:
+      enabled: true
+      size: 8Gi
+      storageClass: "managed-premium"
+
+metrics:
+  enabled: true
+  serviceMonitor:
+    enabled: true
+    namespace: monitoring
+    interval: 1m