diff --git a/configs/etc/hosts b/configs/etc/hosts index 37153db..a0909e8 100644 --- a/configs/etc/hosts +++ b/configs/etc/hosts @@ -10,22 +10,18 @@ # not be consulted at all; see /etc/nsswitch.conf for the resolution order. # # -::1 localhost localhost.my.domain -127.0.0.1 localhost localhost.my.domain +::1 localhost +127.0.0.1 localhost 192.168.0.10 nas nas.ahlawat.com fd01::10 nas nas.ahlawat.com -192.168.1.10 nas nas.ahlawat.com -fd02::10 nas nas.ahlawat.com -192.168.2.10 nas nas.ahlawat.com -fd05::10 nas nas.ahlawat.com -192.168.200.10 nas nas.ahlawat.com -fd09::10 nas nas.ahlawat.com 192.168.10.10 nas nas.ahlawat.com fd0a::10 nas nas.ahlawat.com 192.168.48.10 nas nas.ahlawat.com 2001:470:480a::10 nas nas.ahlawat.com +10.1.0.193 crucible.ad.inseego.com i01bitcru00.ad.inseego.com bitbucket.ad.inseego.com + # # Imaginary network. 10.0.0.2 myname.my.domain myname 10.0.0.3 myfriend.my.domain myfriend # diff --git a/configs/etc/rc.conf b/configs/etc/rc.conf index fcfdcba..9ed43e1 100644 --- a/configs/etc/rc.conf +++ b/configs/etc/rc.conf @@ -17,8 +17,8 @@ performance_cpu_freq="HIGH" ntpd_sync_on_start="YES" ntpd_enable="YES" -powerd_enable="YES" -powerd_flags="-a hiadaptive -n hiadaptive -m 2500 -M 3300" +powerdxx_enable="YES" +powerdxx_flags="" smartd_enable="YES" nut_enable="YES" @@ -30,27 +30,38 @@ firewall_type="open" firewall_logging="YES" firewall_logif="YES" -# interfaces +# /interfaces cloned_interfaces_sticky="YES" -cloned_interfaces="lagg0 bridge1 bridge2 bridge5 bridge9 bridge10 bridge48" +cloned_interfaces="lagg0 bridge1 bridge2 bridge3 bridge5 bridge8 bridge9 bridge10 bridge48" ifconfig_lagg0="laggproto loadbalance laggport igb0 laggport igb1 up" ifconfig_igb0="up -rxcsum -rxcsum6 -txcsum -txcsum6 -lro -tso -vlanhwtso" ifconfig_igb1="up -rxcsum -rxcsum6 -txcsum -txcsum6 -lro -tso -vlanhwtso" -vlans_lagg0="1 2 5 9 10 48" +vlans_lagg0="1 2 3 5 8 9 10 48" ipv6_activate_all_interfaces="YES" rtsold_enable="YES" ifconfig_lagg0_1="inet 192.168.0.10/24" ifconfig_lagg0_1_ipv6="inet6 fd01::10/64 auto_linklocal accept_rtadv" -ifconfig_lagg0_2="inet 192.168.1.10/24" -ifconfig_lagg0_2_ipv6="inet6 fd02::10/64 auto_linklocal accept_rtadv" -ifconfig_lagg0_5="inet 192.168.2.10/24" -ifconfig_lagg0_5_ipv6="inet6 fd05::10/64 auto_linklocal accept_rtadv" -ifconfig_lagg0_9="inet 192.168.200.10/24" -ifconfig_lagg0_9_ipv6="inet6 fd09::10/64 auto_linklocal accept_rtadv" +ifconfig_lagg0_2="up" +#ifconfig_lagg0_2="inet 192.168.2.10/24" +#ifconfig_lagg0_2_ipv6="inet6 fd02::10/64 auto_linklocal accept_rtadv" +ifconfig_lagg0_3="up" +#ifconfig_lagg0_3="inet 192.168.3.10/24" +#ifconfig_lagg0_3_ipv6="inet6 fd03::10/64 auto_linklocal accept_rtadv" +ifconfig_lagg0_5="up" +#ifconfig_lagg0_5="inet 192.168.5.10/24" +#ifconfig_lagg0_5_ipv6="inet6 fd05::10/64 auto_linklocal accept_rtadv" +ifconfig_lagg0_8="up" +# to avoid asymmetric routing - keep ip for vlan8 disabled +#ifconfig_lagg0_8="inet 192.168.8.10/24" +#ifconfig_lagg0_8_ipv6="inet6 fd08::10/64 auto_linklocal accept_rtadv" +ifconfig_lagg0_9="up" +#ifconfig_lagg0_9="inet 192.168.200.10/24" +#ifconfig_lagg0_9_ipv6="inet6 fd09::10/64 auto_linklocal accept_rtadv" +# required for lab servers netboot on vlan10 ifconfig_lagg0_10="inet 192.168.10.10/24" ifconfig_lagg0_10_ipv6="inet6 fd0a::10/64 auto_linklocal accept_rtadv" ifconfig_lagg0_48="inet 192.168.48.10/24" @@ -58,7 +69,9 @@ ifconfig_lagg0_48_ipv6="inet6 2001:470:480a::10/64 auto_linklocal accept_rtadv" ifconfig_bridge1="addm lagg0.1 up" ifconfig_bridge2="addm lagg0.2 up" +ifconfig_bridge3="addm lagg0.3 up" ifconfig_bridge5="addm lagg0.5 up" +ifconfig_bridge8="addm lagg0.8 up" ifconfig_bridge9="addm lagg0.9 up" ifconfig_bridge10="addm lagg0.10 up" ifconfig_bridge48="addm lagg0.48 up" @@ -69,7 +82,7 @@ ifconfig_bridge48="addm lagg0.48 up" defaultrouter="192.168.0.5" ipv6_defaultrouter="fd01::5" -# interfaces +# interfaces/ hostname="nas.ahlawat.com" diff --git a/configs/etc/sysctl.conf b/configs/etc/sysctl.conf index 294330e..a2117ad 100644 --- a/configs/etc/sysctl.conf +++ b/configs/etc/sysctl.conf @@ -12,6 +12,7 @@ security.bsd.unprivileged_read_msgbuf=0 security.bsd.unprivileged_proc_debug=0 kern.randompid=1 vfs.zfs.min_auto_ashift=12 +hw.acpi.cpu.cx_lowest=C6 kern.coredump=1 kern.sugid_coredump=1 diff --git a/configs/usr/local/etc/nanorc b/configs/usr/local/etc/nanorc index cc15950..1a776ab 100644 --- a/configs/usr/local/etc/nanorc +++ b/configs/usr/local/etc/nanorc @@ -161,7 +161,7 @@ set nowrap # set speller "aspell -x -c" ## Allow nano to be suspended. -set suspend +#set suspend ## Use this tab size instead of the default; it must be greater than 0. set tabsize 4 diff --git a/configs/usr/local/etc/rc.d/gstat_exporter b/configs/usr/local/etc/rc.d/gstat_exporter index 2557ac9..e3182dd 100755 --- a/configs/usr/local/etc/rc.d/gstat_exporter +++ b/configs/usr/local/etc/rc.d/gstat_exporter @@ -19,7 +19,7 @@ name=gstat_exporter rcvar=${name}_enable -GSTATEXPORTER="nohup /usr/local/bin/python3.8 /root/FreeBSD/scripts/gstat_exporter.py" +GSTATEXPORTER="nohup /usr/local/bin/python3.9 /root/FreeBSD/scripts/gstat_exporter.py" start_cmd="${name}_start" stop_cmd="${name}_stop" diff --git a/jails/config/atm/pkg-list-details-old.txt b/jails/config/atm/pkg-list-details-old.txt new file mode 100644 index 0000000..72525fa --- /dev/null +++ b/jails/config/atm/pkg-list-details-old.txt @@ -0,0 +1,6 @@ +pkgp123____netatalk3-3.1.13_4,1 +pkgp123____nss-pam-ldapd-sasl-0.9.12_1 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 diff --git a/jails/config/atm/pkg-list-details.txt b/jails/config/atm/pkg-list-details.txt index 5c649a1..cd3458a 100644 --- a/jails/config/atm/pkg-list-details.txt +++ b/jails/config/atm/pkg-list-details.txt @@ -1,6 +1,6 @@ -pkgp122____netatalk3-3.1.12_4,1 +pkgp123____netatalk3-3.1.13_4,1 pkgp123____nss-pam-ldapd-sasl-0.9.12_1 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 diff --git a/jails/config/atm/pkg-list-old.txt b/jails/config/atm/pkg-list-old.txt new file mode 100644 index 0000000..f97a56b --- /dev/null +++ b/jails/config/atm/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion nano netatalk3 nss-pam-ldapd-sasl pkg diff --git a/jails/config/auto/nginx.conf b/jails/config/auto/nginx.conf index 4e687d2..72c7033 100644 --- a/jails/config/auto/nginx.conf +++ b/jails/config/auto/nginx.conf @@ -56,23 +56,42 @@ http { server_name portfolio.ahlawat.com portfolio; location / { + add_header alt-svc 'h3=":443"'; return 301 https://portfolio.ahlawat.com$request_uri; } } server { - listen 0.0.0.0:443 ssl; - listen [::]:443 ssl; + listen 0.0.0.0:443 ssl http2; + listen 0.0.0.0:443 http3 reuseport; + listen [::]:443 ssl http2; + listen [::]:443 http3 reuseport; server_name portfolio.ahlawat.com; + add_header alt-svc 'h3=":443"'; + ssl_certificate /mnt/certs/fullchain.pem; ssl_certificate_key /mnt/certs/privkey.pem; ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; - ssl_ciphers HIGH:!aNULL:!MD5; - ssl_prefer_server_ciphers on; +# ssl_ciphers HIGH:!aNULL:!MD5; +# ssl_prefer_server_ciphers on; + + # modern configuration + ssl_protocols TLSv1.3; + ssl_prefer_server_ciphers off; + + # HSTS (ngx_http_headers_module is required) (63072000 seconds) + add_header Strict-Transport-Security "max-age=63072000" always; + + # OCSP stapling + ssl_stapling on; + ssl_stapling_verify on; + + # verify chain of trust of OCSP response using Root CA and Intermediate certs + ssl_trusted_certificate /mnt/certs/fullchain.pem; #charset koi8-r; @@ -135,8 +154,8 @@ http { } server { - listen 0.0.0.0:443 ssl; - listen [::]:443 ssl; + listen 0.0.0.0:443 ssl http2; + listen [::]:443 ssl http2; server_name producthunt.ahlawat.com; ssl_certificate /mnt/certs/fullchain.pem; @@ -145,8 +164,22 @@ http { ssl_session_cache shared:SSL:1m; ssl_session_timeout 5m; - ssl_ciphers HIGH:!aNULL:!MD5; - ssl_prefer_server_ciphers on; +# ssl_ciphers HIGH:!aNULL:!MD5; +# ssl_prefer_server_ciphers on; + + # modern configuration + ssl_protocols TLSv1.3; + ssl_prefer_server_ciphers off; + + # HSTS (ngx_http_headers_module is required) (63072000 seconds) + add_header Strict-Transport-Security "max-age=63072000" always; + + # OCSP stapling + ssl_stapling on; + ssl_stapling_verify on; + + # verify chain of trust of OCSP response using Root CA and Intermediate certs + ssl_trusted_certificate /mnt/certs/fullchain.pem; #access_log logs/host.access.log main; diff --git a/jails/config/auto/pkg-list-details-old.txt b/jails/config/auto/pkg-list-details-old.txt new file mode 100644 index 0000000..1f2a8ea --- /dev/null +++ b/jails/config/auto/pkg-list-details-old.txt @@ -0,0 +1,13 @@ +pkgp123____bash-5.2.12 +pkgp123____bash-completion-2.11_2,2 +pkgp123____nginx-devel-1.23.2_4 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____py39-ansible-6.1.0 +pkgp-freebsd-pkg____py39-django32-3.2.16 +pkgp-freebsd-pkg____py39-gunicorn-20.1.0 +pkgp-freebsd-pkg____py39-pillow-9.2.0 +pkgp-freebsd-pkg____py39-pip-22.2.2 +pkgp-freebsd-pkg____py39-psycopg2-2.9.4 +pkgp-freebsd-pkg____py39-tkinter-3.9.15_6 +pkgp-freebsd-pkg____sudo-1.9.12p1 diff --git a/jails/config/auto/pkg-list-details.txt b/jails/config/auto/pkg-list-details.txt index 6e6aaa0..b14680f 100644 --- a/jails/config/auto/pkg-list-details.txt +++ b/jails/config/auto/pkg-list-details.txt @@ -1,14 +1,13 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____mc-4.8.28 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____nginx-1.20.2_9,2 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____postgresql14-client-14.2 -pkgp-freebsd-pkg____py38-ansible-5.5.0 -pkgp-freebsd-pkg____py38-django32-3.2.12 -pkgp-freebsd-pkg____py38-gunicorn-20.1.0 -pkgp-freebsd-pkg____py38-pillow-9.0.1_1 -pkgp-freebsd-pkg____py38-pip-20.3.4 -pkgp-freebsd-pkg____py38-tkinter-3.8.13_6 -pkgp-freebsd-pkg____sudo-1.9.10 +pkgp123____bash-completion-2.11_2,2 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____nginx-devel-1.23.2_4 +pkgp-freebsd-pkg____py39-ansible-6.1.0 +pkgp-freebsd-pkg____py39-django32-3.2.16 +pkgp-freebsd-pkg____py39-gunicorn-20.1.0 +pkgp-freebsd-pkg____py39-pillow-9.2.0 +pkgp-freebsd-pkg____py39-pip-22.2.2 +pkgp-freebsd-pkg____py39-psycopg2-2.9.4 +pkgp-freebsd-pkg____py39-tkinter-3.9.15_6 +pkgp-freebsd-pkg____sudo-1.9.12p1 diff --git a/jails/config/auto/pkg-list-old.txt b/jails/config/auto/pkg-list-old.txt new file mode 100644 index 0000000..b85253b --- /dev/null +++ b/jails/config/auto/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion nano nginx-devel pkg py39-ansible py39-django32 py39-gunicorn py39-pillow py39-pip py39-psycopg2 py39-tkinter sudo diff --git a/jails/config/auto/pkg-list.txt b/jails/config/auto/pkg-list.txt index e704c74..b85253b 100644 --- a/jails/config/auto/pkg-list.txt +++ b/jails/config/auto/pkg-list.txt @@ -1 +1 @@ -bash bash-completion mc nano nginx pkg postgresql14-client py38-ansible py38-django32 py38-gunicorn py38-pillow py38-pip py38-tkinter sudo +bash bash-completion nano nginx-devel pkg py39-ansible py39-django32 py39-gunicorn py39-pillow py39-pip py39-psycopg2 py39-tkinter sudo diff --git a/jails/config/book/cps b/jails/config/book/cps index 5cbd4b0..0f15266 100755 --- a/jails/config/book/cps +++ b/jails/config/book/cps @@ -19,7 +19,7 @@ name=cpsserver rcvar=${name}_enable -#CPSSERVER="nohup /usr/local/bin/python3.8 /data/calibre-web/cps.py" +#CPSSERVER="nohup /usr/local/bin/python3.9 /data/calibre-web/cps.py" CPSSERVER="nohup /usr/local/bin/cps" start_cmd="${name}_start" diff --git a/jails/config/book/pkg-list-details-old.txt b/jails/config/book/pkg-list-details-old.txt new file mode 100644 index 0000000..fa1c5c8 --- /dev/null +++ b/jails/config/book/pkg-list-details-old.txt @@ -0,0 +1,10 @@ +pkgp123____libxml2-2.10.3_1 +pkgp123____libxslt-1.1.37 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____py39-ldap-3.4.0 +pkgp-freebsd-pkg____py39-pip-22.2.2 +pkgp-freebsd-pkg____py39-sqlite3-3.9.15_7 +pkgp-freebsd-pkg____rust-1.64.0 diff --git a/jails/config/book/pkg-list-details.txt b/jails/config/book/pkg-list-details.txt index 35a3be6..0dbeaca 100644 --- a/jails/config/book/pkg-list-details.txt +++ b/jails/config/book/pkg-list-details.txt @@ -1,10 +1,10 @@ -pkgp123____libxml2-2.9.13_2 -pkgp123____libxslt-1.1.35_3 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____py38-ldap-3.4.0 -pkgp-freebsd-pkg____py38-pip-20.3.4 -pkgp-freebsd-pkg____py38-sqlite3-3.8.13_7 -pkgp-freebsd-pkg____rust-1.59.0 +pkgp123____libxml2-2.10.3_1 +pkgp123____libxslt-1.1.37 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____py39-ldap-3.4.0 +pkgp-freebsd-pkg____py39-pip-22.2.2 +pkgp-freebsd-pkg____py39-sqlite3-3.9.15_7 +pkgp-freebsd-pkg____rust-1.65.0 diff --git a/jails/config/book/pkg-list-old.txt b/jails/config/book/pkg-list-old.txt new file mode 100644 index 0000000..5fb392e --- /dev/null +++ b/jails/config/book/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion libxml2 libxslt nano pkg py39-ldap py39-pip py39-sqlite3 rust diff --git a/jails/config/book/pkg-list.txt b/jails/config/book/pkg-list.txt index e6a9025..5fb392e 100644 --- a/jails/config/book/pkg-list.txt +++ b/jails/config/book/pkg-list.txt @@ -1 +1 @@ -bash bash-completion libxml2 libxslt nano pkg py38-ldap py38-pip py38-sqlite3 rust +bash bash-completion libxml2 libxslt nano pkg py39-ldap py39-pip py39-sqlite3 rust diff --git a/jails/config/calibre/pkg-list-details-old.txt b/jails/config/calibre/pkg-list-details-old.txt new file mode 100644 index 0000000..d58afc6 --- /dev/null +++ b/jails/config/calibre/pkg-list-details-old.txt @@ -0,0 +1,11 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____calibre-5.44.0_6 +pkgp-freebsd-pkg____fluxbox-1.3.7_5 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____sudo-1.9.12p1 +pkgp-freebsd-pkg____tigervnc-server-1.12.0_5 +pkgp-freebsd-pkg____xauth-1.1.1 +pkgp-freebsd-pkg____xpdf-4.04,1 +pkgp-freebsd-pkg____xterm-375 diff --git a/jails/config/calibre/pkg-list-details.txt b/jails/config/calibre/pkg-list-details.txt index b5ecbf4..3fb7fa8 100644 --- a/jails/config/calibre/pkg-list-details.txt +++ b/jails/config/calibre/pkg-list-details.txt @@ -1,11 +1,11 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____calibre-5.40.0 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____calibre-5.44.0_6 pkgp-freebsd-pkg____fluxbox-1.3.7_5 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 -pkgp-freebsd-pkg____tigervnc-server-1.12.0_4 -pkgp-freebsd-pkg____xauth-1.1 -pkgp-freebsd-pkg____xpdf-4.03_1,1 -pkgp-freebsd-pkg____xterm-372 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____sudo-1.9.12p1 +pkgp-freebsd-pkg____tigervnc-server-1.12.0_5 +pkgp-freebsd-pkg____xauth-1.1.1 +pkgp-freebsd-pkg____xpdf-4.04,1 +pkgp-freebsd-pkg____xterm-377 diff --git a/jails/config/calibre/pkg-list-old.txt b/jails/config/calibre/pkg-list-old.txt new file mode 100644 index 0000000..6733504 --- /dev/null +++ b/jails/config/calibre/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion calibre fluxbox nano pkg sudo tigervnc-server xauth xpdf xterm diff --git a/jails/config/cam/pkg-list-details-old.txt b/jails/config/cam/pkg-list-details-old.txt new file mode 100644 index 0000000..33e579d --- /dev/null +++ b/jails/config/cam/pkg-list-details-old.txt @@ -0,0 +1,7 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____curl-7.85.0 +pkgp-freebsd-pkg____motion-4.3.2_3 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____py27-pip-20.2.3 diff --git a/jails/config/cam/pkg-list-details.txt b/jails/config/cam/pkg-list-details.txt index 4142e07..1a52908 100644 --- a/jails/config/cam/pkg-list-details.txt +++ b/jails/config/cam/pkg-list-details.txt @@ -1,7 +1,7 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____curl-7.82.0 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____curl-7.85.0 pkgp-freebsd-pkg____motion-4.3.2_3 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 pkgp-freebsd-pkg____py27-pip-20.2.3 diff --git a/jails/config/cam/pkg-list-old.txt b/jails/config/cam/pkg-list-old.txt new file mode 100644 index 0000000..3a4bfa9 --- /dev/null +++ b/jails/config/cam/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion curl motion nano pkg py27-pip diff --git a/jails/config/cert/config.cfg b/jails/config/cert/config.cfg index 1aac380..a03f14b 100644 --- a/jails/config/cert/config.cfg +++ b/jails/config/cert/config.cfg @@ -4,7 +4,7 @@ # for example: listen = "127.0.0.1:53" listen = "0.0.0.0:53" # protocol, "both", "both4", "both6", "udp", "udp4", "udp6" or "tcp", "tcp4", "tcp6" -protocol = "both4" +protocol = "both" # domain name to serve the requests off of domain = "dns-auth.ahlawat.com" # zone name server @@ -44,7 +44,7 @@ tls_cert_fullchain = "/mnt/certs/fullchain.pem" # only used if tls = "letsencrypt" acme_cache_dir = "api-certs" # optional e-mail address to which Let's Encrypt will send expiration notices for the API's cert -notification_email = "" +notification_email = "sharad.ahlawat.com" # CORS AllowOrigins, wildcards can be used corsorigins = [ "*" @@ -56,7 +56,7 @@ header_name = "X-Forwarded-For" [logconfig] # logging level: "error", "warning", "info" or "debug" -loglevel = "debug" +loglevel = "error" # possible values: stdout, TODO file & integrations logtype = "stdout" # file path for logfile TODO diff --git a/jails/config/cert/ocsp_update.sh b/jails/config/cert/ocsp_update.sh new file mode 100755 index 0000000..3f0e9f3 --- /dev/null +++ b/jails/config/cert/ocsp_update.sh @@ -0,0 +1,27 @@ +#!/usr/local/bin/bash + +shopt -u nullglob + +# Certificates path and names +DIR="/mnt/certs" +CERTS="${DIR}/*haproxy.pem" + +for CERT in $CERTS; do +# Get the issuer URI, download it's certificate and convert into PEM format +ISSUER_URI=$(openssl x509 -in $CERT -text -noout | grep 'CA Issuers' | cut -d: -f2,3) +ISSUER_NAME=$(echo ${ISSUER_URI} | cut -d/ -f3) +ISSUER_PEM="${DIR}/${ISSUER_NAME}.pem" +wget -q -O- $ISSUER_URI | openssl x509 -inform DER -outform PEM -out $ISSUER_PEM + +# Get the OCSP URL from the certificate +ocsp_url=$(openssl x509 -noout -ocsp_uri -in $CERT) + +# Extract the hostname from the OCSP URL +ocsp_host=$(echo $ocsp_url | cut -d/ -f3) + +# Create/update the ocsp response file +openssl ocsp -noverify -no_nonce -issuer $ISSUER_PEM -cert $CERT -url $ocsp_url -header Host=$ocsp_host -respout ${CERT}.ocsp + +done + +exit 0 diff --git a/jails/config/cert/pkg-list-details-old.txt b/jails/config/cert/pkg-list-details-old.txt new file mode 100644 index 0000000..3692cce --- /dev/null +++ b/jails/config/cert/pkg-list-details-old.txt @@ -0,0 +1,8 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____curl-7.85.0 +pkgp-freebsd-pkg____git-lite-2.38.1_3 +pkgp-freebsd-pkg____go-1.19,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____wget-1.21.3_1 diff --git a/jails/config/cert/pkg-list-details.txt b/jails/config/cert/pkg-list-details.txt index ec2c347..f1647df 100644 --- a/jails/config/cert/pkg-list-details.txt +++ b/jails/config/cert/pkg-list-details.txt @@ -1,7 +1,8 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____curl-7.82.0 -pkgp-freebsd-pkg____git-lite-2.35.1 -pkgp-freebsd-pkg____go-1.18,1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____curl-7.85.0 +pkgp-freebsd-pkg____git-lite-2.38.1_4 +pkgp-freebsd-pkg____go-1.19,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____wget-1.21.3_1 diff --git a/jails/config/cert/pkg-list-old.txt b/jails/config/cert/pkg-list-old.txt new file mode 100644 index 0000000..eb679c1 --- /dev/null +++ b/jails/config/cert/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion curl git-lite go nano pkg wget diff --git a/jails/config/cert/pkg-list.txt b/jails/config/cert/pkg-list.txt index 3bd803e..eb679c1 100644 --- a/jails/config/cert/pkg-list.txt +++ b/jails/config/cert/pkg-list.txt @@ -1 +1 @@ -bash bash-completion curl git-lite go nano pkg +bash bash-completion curl git-lite go nano pkg wget diff --git a/jails/config/ci/pkg-list-details-old.txt b/jails/config/ci/pkg-list-details-old.txt new file mode 100644 index 0000000..6f4da6c --- /dev/null +++ b/jails/config/ci/pkg-list-details-old.txt @@ -0,0 +1,5 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____jenkins-2.377 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/ci/pkg-list-details.txt b/jails/config/ci/pkg-list-details.txt index f7d3fdc..1970ca7 100644 --- a/jails/config/ci/pkg-list-details.txt +++ b/jails/config/ci/pkg-list-details.txt @@ -1,5 +1,5 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____jenkins-2.341 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____jenkins-2.378 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/ci/pkg-list-old.txt b/jails/config/ci/pkg-list-old.txt new file mode 100644 index 0000000..aaf032d --- /dev/null +++ b/jails/config/ci/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion jenkins nano pkg diff --git a/jails/config/cloud/pkg-list-details-old.txt b/jails/config/cloud/pkg-list-details-old.txt new file mode 100644 index 0000000..2aac1f2 --- /dev/null +++ b/jails/config/cloud/pkg-list-details-old.txt @@ -0,0 +1,43 @@ +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____ffmpeg-4.4.3_1,1 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____php80-8.0.25 +pkgp-freebsd-pkg____php80-bcmath-8.0.25 +pkgp-freebsd-pkg____php80-bz2-8.0.25 +pkgp-freebsd-pkg____php80-ctype-8.0.25 +pkgp-freebsd-pkg____php80-curl-8.0.25 +pkgp-freebsd-pkg____php80-dom-8.0.25 +pkgp-freebsd-pkg____php80-exif-8.0.25 +pkgp-freebsd-pkg____php80-fileinfo-8.0.25 +pkgp-freebsd-pkg____php80-filter-8.0.25 +pkgp-freebsd-pkg____php80-ftp-8.0.25 +pkgp-freebsd-pkg____php80-gd-8.0.25 +pkgp-freebsd-pkg____php80-gmp-8.0.25 +pkgp-freebsd-pkg____php80-iconv-8.0.25 +pkgp-freebsd-pkg____php80-imap-8.0.25 +pkgp-freebsd-pkg____php80-intl-8.0.25_1 +pkgp-freebsd-pkg____php80-ldap-8.0.25 +pkgp-freebsd-pkg____php80-mbstring-8.0.25 +pkgp-freebsd-pkg____php80-mysqli-8.0.25 +pkgp-freebsd-pkg____php80-opcache-8.0.25 +pkgp-freebsd-pkg____php80-pcntl-8.0.25 +pkgp-freebsd-pkg____php80-pdo-8.0.25 +pkgp-freebsd-pkg____php80-pdo_mysql-8.0.25 +pkgp-freebsd-pkg____php80-pecl-APCu-5.1.22 +pkgp-freebsd-pkg____php80-pecl-imagick-3.7.0 +pkgp-freebsd-pkg____php80-pecl-mcrypt-1.0.5 +pkgp-freebsd-pkg____php80-pecl-redis-5.3.5 +pkgp-freebsd-pkg____php80-posix-8.0.25 +pkgp-freebsd-pkg____php80-session-8.0.25 +pkgp-freebsd-pkg____php80-simplexml-8.0.25 +pkgp-freebsd-pkg____php80-xml-8.0.25 +pkgp-freebsd-pkg____php80-xmlreader-8.0.25 +pkgp-freebsd-pkg____php80-xmlwriter-8.0.25 +pkgp-freebsd-pkg____php80-xsl-8.0.25 +pkgp-freebsd-pkg____php80-zip-8.0.25 +pkgp-freebsd-pkg____php80-zlib-8.0.25 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____redis-7.0.5 +pkgp-freebsd-pkg____sudo-1.9.12p1 diff --git a/jails/config/cloud/pkg-list-details.txt b/jails/config/cloud/pkg-list-details.txt index d275002..5c69490 100644 --- a/jails/config/cloud/pkg-list-details.txt +++ b/jails/config/cloud/pkg-list-details.txt @@ -1,44 +1,43 @@ -pkgp-freebsd-pkg____apache24-2.4.53 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____ffmpeg-4.4.1_11,1 -pkgp-freebsd-pkg____mod_php80-8.0.17_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____php80-8.0.17_2 -pkgp-freebsd-pkg____php80-bcmath-8.0.17_2 -pkgp-freebsd-pkg____php80-bz2-8.0.17_2 -pkgp-freebsd-pkg____php80-ctype-8.0.17_2 -pkgp-freebsd-pkg____php80-curl-8.0.17_2 -pkgp-freebsd-pkg____php80-dom-8.0.17_1 -pkgp-freebsd-pkg____php80-exif-8.0.17_2 -pkgp-freebsd-pkg____php80-fileinfo-8.0.17_2 -pkgp-freebsd-pkg____php80-filter-8.0.17_2 -pkgp-freebsd-pkg____php80-ftp-8.0.17_2 -pkgp-freebsd-pkg____php80-gd-8.0.17_2 -pkgp-freebsd-pkg____php80-gmp-8.0.17_2 -pkgp-freebsd-pkg____php80-iconv-8.0.17_2 -pkgp-freebsd-pkg____php80-imap-8.0.17_2 -pkgp-freebsd-pkg____php80-intl-8.0.17_2 -pkgp-freebsd-pkg____php80-ldap-8.0.17_2 -pkgp-freebsd-pkg____php80-mbstring-8.0.17_2 -pkgp-freebsd-pkg____php80-mysqli-8.0.17_2 -pkgp-freebsd-pkg____php80-opcache-8.0.17_2 -pkgp-freebsd-pkg____php80-pcntl-8.0.17_2 -pkgp-freebsd-pkg____php80-pdo-8.0.17_2 -pkgp-freebsd-pkg____php80-pdo_mysql-8.0.17_2 -pkgp-freebsd-pkg____php80-pecl-APCu-5.1.21 -pkgp-freebsd-pkg____php80-pecl-imagick-3.5.1 -pkgp-freebsd-pkg____php80-pecl-mcrypt-1.0.4 +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____ffmpeg-4.4.3_1,1 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____php80-8.0.25 +pkgp-freebsd-pkg____php80-bcmath-8.0.25 +pkgp-freebsd-pkg____php80-bz2-8.0.25 +pkgp-freebsd-pkg____php80-ctype-8.0.25 +pkgp-freebsd-pkg____php80-curl-8.0.25 +pkgp-freebsd-pkg____php80-dom-8.0.25 +pkgp-freebsd-pkg____php80-exif-8.0.25 +pkgp-freebsd-pkg____php80-fileinfo-8.0.25 +pkgp-freebsd-pkg____php80-filter-8.0.25 +pkgp-freebsd-pkg____php80-ftp-8.0.25 +pkgp-freebsd-pkg____php80-gd-8.0.25 +pkgp-freebsd-pkg____php80-gmp-8.0.25 +pkgp-freebsd-pkg____php80-iconv-8.0.25 +pkgp-freebsd-pkg____php80-imap-8.0.25 +pkgp-freebsd-pkg____php80-intl-8.0.25_1 +pkgp-freebsd-pkg____php80-ldap-8.0.25 +pkgp-freebsd-pkg____php80-mbstring-8.0.25 +pkgp-freebsd-pkg____php80-mysqli-8.0.25 +pkgp-freebsd-pkg____php80-opcache-8.0.25 +pkgp-freebsd-pkg____php80-pcntl-8.0.25 +pkgp-freebsd-pkg____php80-pdo-8.0.25 +pkgp-freebsd-pkg____php80-pdo_mysql-8.0.25 +pkgp-freebsd-pkg____php80-pecl-APCu-5.1.22 +pkgp-freebsd-pkg____php80-pecl-imagick-3.7.0 +pkgp-freebsd-pkg____php80-pecl-mcrypt-1.0.5 pkgp-freebsd-pkg____php80-pecl-redis-5.3.5 -pkgp-freebsd-pkg____php80-posix-8.0.17_2 -pkgp-freebsd-pkg____php80-session-8.0.17_2 -pkgp-freebsd-pkg____php80-simplexml-8.0.17_1 -pkgp-freebsd-pkg____php80-xml-8.0.17_1 -pkgp-freebsd-pkg____php80-xmlreader-8.0.17_1 -pkgp-freebsd-pkg____php80-xmlwriter-8.0.17_1 -pkgp-freebsd-pkg____php80-xsl-8.0.17_1 -pkgp-freebsd-pkg____php80-zip-8.0.17_2 -pkgp-freebsd-pkg____php80-zlib-8.0.17_2 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____redis-6.2.6 -pkgp-freebsd-pkg____sudo-1.9.10 +pkgp-freebsd-pkg____php80-posix-8.0.25 +pkgp-freebsd-pkg____php80-session-8.0.25 +pkgp-freebsd-pkg____php80-simplexml-8.0.25 +pkgp-freebsd-pkg____php80-xml-8.0.25 +pkgp-freebsd-pkg____php80-xmlreader-8.0.25 +pkgp-freebsd-pkg____php80-xmlwriter-8.0.25 +pkgp-freebsd-pkg____php80-xsl-8.0.25 +pkgp-freebsd-pkg____php80-zip-8.0.25 +pkgp-freebsd-pkg____php80-zlib-8.0.25 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____redis-7.0.5 +pkgp-freebsd-pkg____sudo-1.9.12p1 diff --git a/jails/config/cloud/pkg-list-old.txt b/jails/config/cloud/pkg-list-old.txt new file mode 100644 index 0000000..2adb475 --- /dev/null +++ b/jails/config/cloud/pkg-list-old.txt @@ -0,0 +1 @@ +apache24 bash bash-completion ffmpeg nano php80 php80-bcmath php80-bz2 php80-ctype php80-curl php80-dom php80-exif php80-fileinfo php80-filter php80-ftp php80-gd php80-gmp php80-iconv php80-imap php80-intl php80-ldap php80-mbstring php80-mysqli php80-opcache php80-pcntl php80-pdo php80-pdo_mysql php80-pecl-APCu php80-pecl-imagick php80-pecl-mcrypt php80-pecl-redis php80-posix php80-session php80-simplexml php80-xml php80-xmlreader php80-xmlwriter php80-xsl php80-zip php80-zlib pkg redis sudo diff --git a/jails/config/cloud/pkg-list.txt b/jails/config/cloud/pkg-list.txt index 85da320..2adb475 100644 --- a/jails/config/cloud/pkg-list.txt +++ b/jails/config/cloud/pkg-list.txt @@ -1 +1 @@ -apache24 bash bash-completion ffmpeg mod_php80 nano php80 php80-bcmath php80-bz2 php80-ctype php80-curl php80-dom php80-exif php80-fileinfo php80-filter php80-ftp php80-gd php80-gmp php80-iconv php80-imap php80-intl php80-ldap php80-mbstring php80-mysqli php80-opcache php80-pcntl php80-pdo php80-pdo_mysql php80-pecl-APCu php80-pecl-imagick php80-pecl-mcrypt php80-pecl-redis php80-posix php80-session php80-simplexml php80-xml php80-xmlreader php80-xmlwriter php80-xsl php80-zip php80-zlib pkg redis sudo +apache24 bash bash-completion ffmpeg nano php80 php80-bcmath php80-bz2 php80-ctype php80-curl php80-dom php80-exif php80-fileinfo php80-filter php80-ftp php80-gd php80-gmp php80-iconv php80-imap php80-intl php80-ldap php80-mbstring php80-mysqli php80-opcache php80-pcntl php80-pdo php80-pdo_mysql php80-pecl-APCu php80-pecl-imagick php80-pecl-mcrypt php80-pecl-redis php80-posix php80-session php80-simplexml php80-xml php80-xmlreader php80-xmlwriter php80-xsl php80-zip php80-zlib pkg redis sudo diff --git a/jails/config/common/nanorc b/jails/config/common/nanorc index cc15950..1a776ab 100644 --- a/jails/config/common/nanorc +++ b/jails/config/common/nanorc @@ -161,7 +161,7 @@ set nowrap # set speller "aspell -x -c" ## Allow nano to be suspended. -set suspend +#set suspend ## Use this tab size instead of the default; it must be greater than 0. set tabsize 4 diff --git a/jails/config/db/pkg-list-details-old.txt b/jails/config/db/pkg-list-details-old.txt new file mode 100644 index 0000000..6ab5a0f --- /dev/null +++ b/jails/config/db/pkg-list-details-old.txt @@ -0,0 +1,6 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____mariadb105-server-10.5.17_1 +pkgp-freebsd-pkg____mysqld_exporter-0.12.1_6 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/db/pkg-list-details.txt b/jails/config/db/pkg-list-details.txt index 7e30f3e..332e6c6 100644 --- a/jails/config/db/pkg-list-details.txt +++ b/jails/config/db/pkg-list-details.txt @@ -1,6 +1,6 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____mariadb105-server-10.5.15_2 -pkgp-freebsd-pkg____mysqld_exporter-0.12.1_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____mariadb105-server-10.5.17_1 +pkgp-freebsd-pkg____mysqld_exporter-0.12.1_6 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/db/pkg-list-old.txt b/jails/config/db/pkg-list-old.txt new file mode 100644 index 0000000..3167549 --- /dev/null +++ b/jails/config/db/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion mariadb105-server mysqld_exporter nano pkg diff --git a/jails/config/dns/dns_update.sh b/jails/config/dns/dns_update.sh index bc23154..2be9fec 100755 --- a/jails/config/dns/dns_update.sh +++ b/jails/config/dns/dns_update.sh @@ -24,21 +24,21 @@ cd /data/namedb/master rm /data/namedb/master/*signed* declare -A ZONE_PEM -ZONE_PEM=(["ahlawat.com"]="" ["beyondbell.com"]="bb" ["diyit.org"]="diy" ["xflow.org"]="xflow" ["datavpc.com"]="dvpc" ["mydatavpc.com"]="mdvpc" ["rockwoodestates.org"]="rwe" ["rockwoodranch.org"]="rwr" ["scvcc-rental.com"]="scvcc") +# ZONE_PEM=(["ahlawat.com"]="" ["beyondbell.com"]="bb" ["diyit.org"]="diy" ["xflow.org"]="xflow" ["datavpc.com"]="dvpc" ["mydatavpc.com"]="mdvpc" ["rockwoodestates.org"]="rwe" ["rockwoodranch.org"]="rwr" ["scvcc-rental.com"]="scvcc" ["inseego5g.net"]="i5g" ) +ZONE_PEM=(["ahlawat.com"]="" ["beyondbell.com"]="bb" ["diyit.org"]="diy" ["datavpc.com"]="dvpc" ["mydatavpc.com"]="mdvpc" ["rockwoodestates.org"]="rwe" ["rockwoodranch.org"]="rwr" ["scvcc-rental.com"]="scvcc" ["inseego5g.net"]="i5g" ) for ZONE in "${!ZONE_PEM[@]}" do PEM=${ZONE_PEM[$ZONE]} - /usr/local/bin/ldns-dane -c "/mnt/certs/"$PEM"fullchain.pem" create mail.$ZONE 25 3 1 1 > /data/namedb/master/tlsa-$ZONE - /usr/local/bin/ldns-dane -c "/mnt/certs/"$PEM"fullchain.pem" create mail-backup.$ZONE 25 3 1 1 >> /data/namedb/master/tlsa-$ZONE - /usr/local/bin/ldns-dane -c "/mnt/certs/"$PEM"fullchain.pem" create $ZONE 443 3 1 1 >> /data/namedb/master/tlsa-$ZONE - /usr/local/bin/ldns-dane -c "/mnt/certs/"$PEM"fullchain.pem" create www.$ZONE 443 3 1 1 >> /data/namedb/master/tlsa-$ZONE + /usr/local/bin/ldns-dane -c "/mnt/certs/${PEM}fullchain.pem" create mail.$ZONE 25 3 1 1 > /data/namedb/master/tlsa-$ZONE + /usr/local/bin/ldns-dane -c "/mnt/certs/${PEM}fullchain.pem" create mail-backup.$ZONE 25 3 1 1 >> /data/namedb/master/tlsa-$ZONE + /usr/local/bin/ldns-dane -c "/mnt/certs/${PEM}fullchain.pem" create $ZONE 443 3 1 1 >> /data/namedb/master/tlsa-$ZONE + /usr/local/bin/ldns-dane -c "/mnt/certs/${PEM}fullchain.pem" create www.$ZONE 443 3 1 1 >> /data/namedb/master/tlsa-$ZONE done NEW_SERIAL=`date -j +%Y%m%d%H` #NEW_SERIAL="2022022635" -echo $NEW_SERIAL for DBFILE in `ls /data/namedb/master/*.db` do @@ -47,6 +47,7 @@ do /usr/local/sbin/named-checkzone $ZONE $DBFILE SERIAL=`/usr/local/sbin/named-checkzone $ZONE $DBFILE | egrep -ho '[0-9]{10}'` echo $SERIAL + echo $NEW_SERIAL sed -i .orig 's/'$SERIAL'/'$(($NEW_SERIAL))'/' $DBFILE #/usr/local/sbin/dnssec-signzone -S -K /data/namedb/master -t -o $ZONE $DBFILE diff --git a/jails/config/dns/pkg-list-details-old.txt b/jails/config/dns/pkg-list-details-old.txt new file mode 100644 index 0000000..e89449d --- /dev/null +++ b/jails/config/dns/pkg-list-details-old.txt @@ -0,0 +1,7 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____bind916-9.16.34_1 +pkgp-freebsd-pkg____ldns-1.8.3 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____rpl-1.4.1 diff --git a/jails/config/dns/pkg-list-details.txt b/jails/config/dns/pkg-list-details.txt index 7f22ccc..6cc688d 100644 --- a/jails/config/dns/pkg-list-details.txt +++ b/jails/config/dns/pkg-list-details.txt @@ -1,7 +1,7 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____bind916-9.16.27 -pkgp-freebsd-pkg____ldns-1.8.1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____bind916-9.16.35 +pkgp-freebsd-pkg____ldns-1.8.3 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 pkgp-freebsd-pkg____rpl-1.4.1 diff --git a/jails/config/dns/pkg-list-old.txt b/jails/config/dns/pkg-list-old.txt new file mode 100644 index 0000000..29f51bf --- /dev/null +++ b/jails/config/dns/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion bind916 ldns nano pkg rpl diff --git a/jails/config/elk/kibana.yml b/jails/config/elk/kibana.yml index 6463ebc..47581cf 100644 --- a/jails/config/elk/kibana.yml +++ b/jails/config/elk/kibana.yml @@ -27,6 +27,8 @@ server.name: "kibana.diyit.org" # The URLs of the Elasticsearch instances to use for all your queries. elasticsearch.hosts: ["https://elk.diyit.org:9200"] +server.publicBaseUrl: "https://kibana.diyit.org" + # When this setting's value is true Kibana uses the hostname specified in the server.host # setting. When the value of this setting is false, Kibana uses the hostname of the host # that connects to this Kibana instance. @@ -43,7 +45,7 @@ elasticsearch.hosts: ["https://elk.diyit.org:9200"] # the username and password that the Kibana server uses to perform maintenance on the Kibana # index at startup. Your Kibana users still need to authenticate with Elasticsearch, which # is proxied through the Kibana server. -elasticsearch.username: "kibana" +elasticsearch.username: "kibana_system" elasticsearch.password: "0AKzGiy2Cu4Klaz23asT" # Enables SSL and paths to the PEM-format SSL certificate and SSL key files, respectively. @@ -58,7 +60,7 @@ server.ssl.key: /mnt/certs/diyprivkeyr.pem #elasticsearch.ssl.certificate: /path/to/your/client.crt #elasticsearch.ssl.key: /path/to/your/client.key -xpack.security.enabled: true +#xpack.security.enabled: true xpack.encryptedSavedObjects.encryptionKey: "something_at_least_32_characters_this_is_it" # Optional setting that enables you to specify a path to the PEM file for the certificate diff --git a/jails/config/elk/pkg-list-details-old.txt b/jails/config/elk/pkg-list-details-old.txt new file mode 100644 index 0000000..2252a09 --- /dev/null +++ b/jails/config/elk/pkg-list-details-old.txt @@ -0,0 +1,10 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____beats7-7.17.7 +pkgp-freebsd-pkg____curl-7.85.0 +pkgp-freebsd-pkg____elasticsearch7-7.17.7 +pkgp-freebsd-pkg____kibana7-7.17.7 +pkgp-freebsd-pkg____logstash7-7.17.7 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____openjdk11-11.0.17+8.1_1 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/elk/pkg-list-details.txt b/jails/config/elk/pkg-list-details.txt index 4a1a4ec..0bfc543 100644 --- a/jails/config/elk/pkg-list-details.txt +++ b/jails/config/elk/pkg-list-details.txt @@ -1,10 +1,10 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____beats7-7.16.3_1 -pkgp-freebsd-pkg____curl-7.82.0 -pkgp-freebsd-pkg____elasticsearch7-7.16.3 -pkgp-freebsd-pkg____kibana7-7.16.3 -pkgp-freebsd-pkg____logstash7-7.16.3 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openjdk11-11.0.14+9.1_1 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____beats7-7.17.7 +pkgp-freebsd-pkg____curl-7.85.0 +pkgp-freebsd-pkg____elasticsearch7-7.17.7 +pkgp-freebsd-pkg____kibana7-7.17.7 +pkgp-freebsd-pkg____logstash7-7.17.7 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____openjdk11-11.0.17+8.1_1 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/elk/pkg-list-old.txt b/jails/config/elk/pkg-list-old.txt new file mode 100644 index 0000000..cac4741 --- /dev/null +++ b/jails/config/elk/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion beats7 curl elasticsearch7 kibana7 logstash7 nano openjdk11 pkg diff --git a/jails/config/elk/rc.d/elasticsearch b/jails/config/elk/rc.d/elasticsearch index 4394d80..38e4ff0 100755 --- a/jails/config/elk/rc.d/elasticsearch +++ b/jails/config/elk/rc.d/elasticsearch @@ -1,10 +1,8 @@ #!/bin/sh -# -# $FreeBSD: head/textproc/elasticsearch7/files/elasticsearch.in 538703 2020-06-13 22:41:04Z glewis $ -# + # PROVIDE: elasticsearch -# REQUIRE: NETWORKING SERVERS -# BEFORE: DAEMON +# REQUIRE: DAEMON +# BEFORE: LOGIN # KEYWORD: shutdown # # Add the following line to /etc/rc.conf to enable elasticsearch: @@ -17,7 +15,7 @@ # Set it to required group. # elasticsearch_config (path): Set to /usr/local/etc/elasticsearch/elasticsearch.yml by default. # Set it to the config file location. -# elasticsearch_java_home (path): Set to /usr/local/openjdk8 by default. +# elasticsearch_java_home (path): Set to /usr/local/openjdk11 by default. # Set it to the root of the JDK to use. # . /etc/rc.subr @@ -46,7 +44,7 @@ command=/usr/local/lib/elasticsearch/bin/elasticsearch command_args="-d --pidfile=${pidfile}" export ES_PATH_CONF=${elasticsearch_config} -export JAVA_HOME=${elasticsearch_java_home} +export ES_JAVA_HOME=${elasticsearch_java_home} elasticsearch_precmd() { diff --git a/jails/config/elk/rc.d/filebeat b/jails/config/elk/rc.d/filebeat new file mode 100755 index 0000000..4822693 --- /dev/null +++ b/jails/config/elk/rc.d/filebeat @@ -0,0 +1,43 @@ +#!/bin/sh + +# PROVIDE: filebeat +# REQUIRE: DAEMON +# BEFORE: LOGIN +# KEYWORD: shutdown + +# Add the following lines to /etc/rc.conf to enable filebeat: +# +# filebeat_enable (bool): Set to YES to enable filebeat +# Default: NO +# filebeat_flags (str): Extra flags passed to filebeat +# filebeat_config (str): filebeat configuration directory +# Default: ${PREFIX}/etc/beats +# filebeat_conffile (str): filebeat configuration file +# relative to ${filebeat_conf} +# Default: filebeat.yml + +. /etc/rc.subr + +name="filebeat" +rcvar=${name}_enable +load_rc_config $name + +: ${filebeat_enable:="NO"} +: ${filebeat_config:="/usr/local/etc/beats"} +: ${filebeat_conffile:="filebeat.yml"} +: ${filebeat_home:="/usr/local/share/beats/filebeat"} +: ${filebeat_logs:="/var/log/beats"} +: ${filebeat_data:="/var/db/beats/filebeat"} + +# daemon +start_precmd=filebeat_prestart +command=/usr/sbin/daemon +pidfile="/var/run/${name}" +command_args="-frP ${pidfile} /usr/local/sbin/${name} ${filebeat_flags} --path.config ${filebeat_config} --path.home ${filebeat_home} --path.data ${filebeat_data} --path.logs ${filebeat_logs} -c ${filebeat_conffile}" + +filebeat_prestart() { +# Have to empty rc_flags so they don't get passed to daemon(8) + rc_flags="" +} + +run_rc_command "$1" diff --git a/jails/config/elk/rc.d/heartbeat b/jails/config/elk/rc.d/heartbeat new file mode 100755 index 0000000..2b22207 --- /dev/null +++ b/jails/config/elk/rc.d/heartbeat @@ -0,0 +1,44 @@ +#!/bin/sh + +# PROVIDE: heartbeat +# REQUIRE: DAEMON +# BEFORE: LOGIN +# KEYWORD: shutdown + +# Add the following lines to /etc/rc.conf to enable heartbeat: +# +# heartbeat_enable (bool): Set to YES to enable heartbeat +# Default: NO +# heartbeat_flags (str): Extra flags passed to heartbeat +# heartbeat_config (str): heartbeat configuration directory +# Default: ${PREFIX}/etc/beats +# heartbeat_conffile (str): heartbeat configuration file +# relative to ${heartbeat_conf} +# Default: heartbeat.yml + +. /etc/rc.subr + +name="heartbeat" +rcvar=${name}_enable +load_rc_config $name + +: ${heartbeat_enable:="NO"} +: ${heartbeat_config:="/usr/local/etc/beats"} +: ${heartbeat_conffile:="heartbeat.yml"} +: ${heartbeat_home:="/usr/local/share/beats/heartbeat"} +: ${heartbeat_logs:="/var/log/beats"} +: ${heartbeat_data:="/var/db/beats/heartbeat"} + + +# daemon +start_precmd=heartbeat_prestart +command=/usr/sbin/daemon +pidfile="/var/run/${name}" +command_args="-frP ${pidfile} /usr/local/sbin/${name} ${heartbeat_flags} --path.config ${heartbeat_config} --path.home ${heartbeat_home} --path.data ${heartbeat_data} --path.logs ${heartbeat_logs} -c ${heartbeat_conffile}" + +heartbeat_prestart() { +# Have to empty rc_flags so they don't get passed to daemon(8) + rc_flags="" +} + +run_rc_command "$1" diff --git a/jails/config/elk/rc.d/kibana b/jails/config/elk/rc.d/kibana new file mode 100755 index 0000000..b128bbd --- /dev/null +++ b/jails/config/elk/rc.d/kibana @@ -0,0 +1,84 @@ +#!/bin/sh + +# PROVIDE: kibana +# REQUIRE: DAEMON +# BEFORE: LOGIN +# KEYWORD: shutdown + +. /etc/rc.subr + +name=kibana +rcvar=kibana_enable + +load_rc_config $name + +: ${kibana_enable:="NO"} +: ${kibana_config:="/usr/local/etc/kibana/kibana.yml"} +: ${kibana_user:="www"} +: ${kibana_group:="www"} +: ${kibana_log:="/var/log/kibana.log"} +: ${kibana_syslog_output_enable:="NO"} + +start_precmd="kibana_start_precmd" +reload_cmd="kibana_reload_cmd" +extra_commands="reload" + +if checkyesno kibana_syslog_output_enable; then + if [ -n "${kibana_syslog_output_tag}" ]; then + kibana_syslog_output_flags="-T ${kibana_syslog_output_tag}" + else + kibana_syslog_output_flags="-T ${name}" + fi + if [ -n "${kibana_syslog_output_priority}" ]; then + kibana_syslog_output_flags="${kibana_syslog_output_flags} -s ${kibana_syslog_output_priority}" + fi + if [ -n "${kibana_syslog_output_facility}" ]; then + kibana_syslog_output_flags="${kibana_syslog_output_flags} -l ${kibana_syslog_output_facility}" + fi +fi + +NODE="/usr/local/bin/node" + +required_files="${kibana_config}" +pidfile="/var/run/${name}-daemon.pid" +_kpidfile="/var/run/${name}.pid" + +command="/usr/sbin/daemon" +command_args="-f ${kibana_syslog_output_flags} -P ${pidfile} -t ${name} \ + /usr/bin/env BABEL_DISABLE_CACHE=1 NODE_ENV=production ${kibana_env} \ + ${NODE} --no-warnings --max-http-header-size=65536 \ + /usr/local/www/kibana7/src/cli/dist serve \ + --config ${kibana_config} --log-file ${kibana_log} --allow-root \ + --xpack.reporting.enabled=false ${kibana_args}" + +kibana_start_precmd() +{ + if [ ! -e "${pidfile}" ]; then + install -m 0600 -o ${kibana_user} -g ${kibana_group} /dev/null ${pidfile} + fi + if [ ! -e "${_kpidfile}" ]; then + install -m 0600 -o ${kibana_user} -g ${kibana_group} /dev/null ${_kpidfile} + fi + if [ ! -f ${kibana_log} ]; then + install -o ${kibana_user} -g ${kibana_group} -m 640 /dev/null ${kibana_log} + fi + if [ ! -d /usr/local/www/kibana7/optimize ]; then + install -d -o ${kibana_user} -g ${kibana_group} /usr/local/www/kibana7/optimize + else + # We may have installed a plugin as root which will cause files in here + # to be owned by root:wheel. Fix with a chown. + chown -R ${kibana_user}:${kibana_group} /usr/local/www/kibana7/optimize + fi +} + +kibana_reload_cmd() +{ + if [ -z "$rc_pid" ]; then + _run_rc_notrunning + return 1 + else + pkill -HUP -P ${rc_pid} + fi +} + +run_rc_command "$1" diff --git a/jails/config/elk/rc.d/metricbeat b/jails/config/elk/rc.d/metricbeat new file mode 100755 index 0000000..32bceb9 --- /dev/null +++ b/jails/config/elk/rc.d/metricbeat @@ -0,0 +1,51 @@ +#!/bin/sh + +# PROVIDE: metricbeat +# REQUIRE: DAEMON +# BEFORE: LOGIN +# KEYWORD: shutdown + +# Add the following lines to /etc/rc.conf to enable metricbeat: +# +# metricbeat_enable (bool): Set to YES to enable metricbeat +# Default: NO +# metricbeat_flags (str): Extra flags passed to metricbeat +# metricbeat_config (str): metricbeat configuration directory +# Default: ${PREFIX}/etc/beats +# metricbeat_conffile (str): metricbeat configuration file +# relative to ${metricbeat_conf} +# Default: metricbeat.yml + +. /etc/rc.subr + +name="metricbeat" +rcvar=${name}_enable +load_rc_config $name + +: ${metricbeat_enable:="NO"} +: ${metricbeat_config:="/usr/local/etc/beats"} +: ${metricbeat_conffile:="metricbeat.yml"} +: ${metricbeat_home:="/usr/local/share/beats/metricbeat"} +: ${metricbeat_logs:="/var/log/beats"} +: ${metricbeat_data:="/var/db/beats/metricbeat"} + +# daemon +start_precmd=metricbeat_prestart +command=/usr/sbin/daemon +pidfile="/var/run/${name}" +command_args="-frP ${pidfile} /usr/local/sbin/${name} ${metricbeat_flags} --path.config ${metricbeat_config} --path.home ${metricbeat_home} --path.data ${metricbeat_data} --path.logs ${metricbeat_logs} -c ${metricbeat_conffile}" + +metricbeat_prestart() { +# Have to empty rc_flags so they don't get passed to daemon(8) + rc_flags="" +} + +# metricbeat will refuse to quit if linprocfs is mounted, and sadly requires -9 +[ -f /compat/linux/proc/cpuinfo ] && stop_cmd=metricbeat_stop + +metricbeat_stop() { + pkill -9 -F ${pidfile} > /dev/null 2>&1 + pkill -9 -F ${pidfile}.child > /dev/null 2>&1 +} + +run_rc_command "$1" diff --git a/jails/config/git/gitea/conf/app.ini b/jails/config/git/gitea/conf/app.ini new file mode 100644 index 0000000..441db70 --- /dev/null +++ b/jails/config/git/gitea/conf/app.ini @@ -0,0 +1,94 @@ +# # Sample Configuration for Gitea using SQLite +# +# For information on the available settings, consult the online +# documentation, or see the accompanying file app.ini.defaults, which +# contains the settings incorporated into the gitea binary. +# +# This sample configuration runs Gitea with a local database. Before +# running this configuration, make sure to change the SECRET_KEY and the +# INTERNAL_TOKEN at the end of this file. SECRET_KEY is a password of your +# choosing, INTERNAL_TOKEN is a 64-byte random number in BASE64 encoding. +# Your can generate the token using for example: +# openssl rand -base64 64 +# +# There are no pre-configured users; the first user to register becomes an +# admin. In this sample configuration, the HTTP server only listens on +# localhost. +# +# If you'd rather use the web-based installer, remove this conf/app.ini file +# and make /usr/local/etc/gitea/conf writeable to the git user. +APP_NAME = Ahlawat GIT +RUN_USER = git +RUN_MODE = prod + +[database] +DB_TYPE = mysql +HOST = 192.168.0.53:3306 +NAME = gitea +USER = gitea +PASSWD = mysql__gitea + +[indexer] +ISSUE_INDEXER_PATH = /var/db/gitea/indexers/issues.bleve + +[log] +ROOT_PATH = /var/log/gitea +MODE = file +LEVEL = Info +ENABLE_ACCESS_LOG = true +ACCESS = file + +[picture] +DISABLE_GRAVATAR = true +AVATAR_UPLOAD_PATH = /var/db/gitea/data/avatars + +[repository] +ROOT = /var/db/gitea/gitea-repositories + +# Gitea's default is 'bash', so if you have bash installed, you can comment +# this out. +#SCRIPT_TYPE = sh + +[repository.upload] +TEMP_PATH = /var/db/gitea/data/tmp/uploads + +[security] +INSTALL_LOCK = true +INTERNAL_TOKEN = 1FFhAklka01JhgJTRUrFujWYiv4ijqcTIfXJ9o4n1fWxz+XVQdXhrqDTlsnD7fvz7gugdhgkx0FY2Lx6IBdPQw== +SECRET_KEY = BeyondChangeMeBeforeRunningBell +IMPORT_LOCAL_PATHS = true + +[session] +COOKIE_SECURE = true + +[server] +DOMAIN = git.ahlawat.com +PROTOCOL = https +HTTP_ADDR = :: +HTTP_PORT = 3000 +ROOT_URL = https://git.ahlawat.com/ +DISABLE_SSH = true +SSH_DOMAIN = %(DOMAIN)s +SSH_PORT = 22 +OFFLINE_MODE = false +APP_DATA_PATH = /var/db/gitea/data +CERT_FILE = /mnt/certs/fullchain.pem +KEY_FILE = /mnt/certs/privkeyr.pem +LANDING_PAGE = explore + +[service] +DISABLE_REGISTRATION = true + +[openid] +ENABLE_OPENID_SIGNIN = false + +[other] +SHOW_FOOTER_BRANDING = false +SHOW_FOOTER_VERSION = false +SHOW_FOOTER_TEMPLATE_LOAD_TIME = false + +[oauth2] +JWT_SECRET = 3giTtKAIflI_e9ixoU6ELHfxGaDkvFwHxDoPZQyZ0ak + +[ui] +#DEFAULT_THEME = arc-green diff --git a/jails/config/git/gitea/conf/app.ini.defaults b/jails/config/git/gitea/conf/app.ini.defaults index a674984..586c924 100644 --- a/jails/config/git/gitea/conf/app.ini.defaults +++ b/jails/config/git/gitea/conf/app.ini.defaults @@ -1,785 +1,2208 @@ - ; This file lists the default values used by Gitea -; Copy required sections to your own app.ini (default is custom/conf/app.ini) -; and modify as needed. +;; Copy required sections to your own app.ini (default is custom/conf/app.ini) +;; and modify as needed. +;; Do not copy the whole file as-is, as it contains some invalid sections for illustrative purposes. +;; If you don't know what a setting is you should not set it. +;; +;; see https://docs.gitea.io/en-us/config-cheat-sheet/ for additional documentation. -; see https://docs.gitea.io/en-us/config-cheat-sheet/ for additional documentation. -; App name that shows in every page title -APP_NAME = Gitea: Git with a cup of tea -; Change it if you run locally -RUN_USER = git -; Either "dev", "prod" or "test", default is "dev" -RUN_MODE = dev - -[repository] -ROOT = -SCRIPT_TYPE = bash -; Default ANSI charset -ANSI_CHARSET = -; Force every new repository to be private -FORCE_PRIVATE = false -; Default privacy setting when creating a new repository, allowed values: last, private, public. Default is last which means the last setting used. -DEFAULT_PRIVATE = last -; Global limit of repositories per user, applied at creation time. -1 means no limit -MAX_CREATION_LIMIT = -1 -; Mirror sync queue length, increase if mirror syncing starts hanging -MIRROR_QUEUE_LENGTH = 1000 -; Patch test queue length, increase if pull request patch testing starts hanging -PULL_REQUEST_QUEUE_LENGTH = 1000 -; Preferred Licenses to place at the top of the List -; The name here must match the filename in conf/license or custom/conf/license -PREFERRED_LICENSES = Apache License 2.0,MIT License -; Disable the ability to interact with repositories using the HTTP protocol -DISABLE_HTTP_GIT = false -; Value for Access-Control-Allow-Origin header, default is not to present -; WARNING: This maybe harmful to you website if you do not give it a right value. -ACCESS_CONTROL_ALLOW_ORIGIN = -; Force ssh:// clone url instead of scp-style uri when default SSH port is used -USE_COMPAT_SSH_URI = false -; Close issues as long as a commit on any branch marks it as fixed -DEFAULT_CLOSE_ISSUES_VIA_COMMITS_IN_ANY_BRANCH = false - -[repository.editor] -; List of file extensions for which lines should be wrapped in the CodeMirror editor -; Separate extensions with a comma. To line wrap files without an extension, just put a comma -LINE_WRAP_EXTENSIONS = .txt,.md,.markdown,.mdown,.mkd, -; Valid file modes that have a preview API associated with them, such as api/v1/markdown -; Separate the values by commas. The preview tab in edit mode won't be displayed if the file extension doesn't match -PREVIEWABLE_FILE_MODES = markdown - -[repository.local] -; Path for local repository copy. Defaults to `tmp/local-repo` -LOCAL_COPY_PATH = tmp/local-repo -; Path for local wiki copy. Defaults to `tmp/local-wiki` -LOCAL_WIKI_PATH = tmp/local-wiki - -[repository.upload] -; Whether repository file uploads are enabled. Defaults to `true` -ENABLED = true -; Path for uploads. Defaults to `data/tmp/uploads` (tmp gets deleted on gitea restart) -TEMP_PATH = data/tmp/uploads -; One or more allowed types, e.g. image/jpeg|image/png. Nothing means any file type -ALLOWED_TYPES = -; Max size of each file in megabytes. Defaults to 3MB -FILE_MAX_SIZE = 3 -; Max number of files per upload. Defaults to 5 -MAX_FILES = 5 - -[repository.pull-request] -; List of prefixes used in Pull Request title to mark them as Work In Progress -WORK_IN_PROGRESS_PREFIXES=WIP:,[WIP] - -[repository.issue] -; List of reasons why a Pull Request or Issue can be locked -LOCK_REASONS=Too heated,Off-topic,Resolved,Spam - -[cors] -; More information about CORS can be found here: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#The_HTTP_response_headers -; enable cors headers (disabled by default) -ENABLED=false -; scheme of allowed requests -SCHEME=http -; list of requesting domains that are allowed -ALLOW_DOMAIN=* -; allow subdomains of headers listed above to request -ALLOW_SUBDOMAIN=false -; list of methods allowed to request -METHODS=GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS -; max time to cache response -MAX_AGE=10m -; allow request with credentials -ALLOW_CREDENTIALS=false - -[ui] -; Number of repositories that are displayed on one explore page -EXPLORE_PAGING_NUM = 20 -; Number of issues that are displayed on one page -ISSUE_PAGING_NUM = 10 -; Number of maximum commits displayed in one activity feed -FEED_MAX_COMMIT_NUM = 5 -; Number of maximum commits displayed in commit graph. -GRAPH_MAX_COMMIT_NUM = 100 -; Number of line of codes shown for a code comment -CODE_COMMENT_LINES = 4 -; Value of `theme-color` meta tag, used by Android >= 5.0 -; An invalid color like "none" or "disable" will have the default style -; More info: https://developers.google.com/web/updates/2014/11/Support-for-theme-color-in-Chrome-39-for-Android -THEME_COLOR_META_TAG = `#6cc644` -; Max size of files to be displayed (default is 8MiB) -MAX_DISPLAY_FILE_SIZE = 8388608 -; Whether the email of the user should be shown in the Explore Users page -SHOW_USER_EMAIL = true -; Set the default theme for the Gitea install -DEFAULT_THEME = gitea -; All available themes. Allow users select personalized themes regardless of the value of `DEFAULT_THEME`. -THEMES = gitea,arc-green -; Whether the full name of the users should be shown where possible. If the full name isn't set, the username will be used. -DEFAULT_SHOW_FULL_NAME = false - -[ui.admin] -; Number of users that are displayed on one page -USER_PAGING_NUM = 50 -; Number of repos that are displayed on one page -REPO_PAGING_NUM = 50 -; Number of notices that are displayed on one page -NOTICE_PAGING_NUM = 25 -; Number of organizations that are displayed on one page -ORG_PAGING_NUM = 50 - -[ui.user] -; Number of repos that are displayed on one page -REPO_PAGING_NUM = 15 - -[ui.meta] -AUTHOR = Gitea - Git with a cup of tea -DESCRIPTION = Gitea (Git with a cup of tea) is a painless self-hosted Git service written in Go -KEYWORDS = go,git,self-hosted,gitea - -[markdown] -; Enable hard line break extension -ENABLE_HARD_LINE_BREAK = false -; List of custom URL-Schemes that are allowed as links when rendering Markdown -; for example git,magnet -CUSTOM_URL_SCHEMES = -; List of file extensions that should be rendered/edited as Markdown -; Separate the extensions with a comma. To render files without any extension as markdown, just put a comma -FILE_EXTENSIONS = .md,.markdown,.mdown,.mkd +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; General Settings +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; App name that shows in every page title +APP_NAME = ; Gitea: Git with a cup of tea +;; +;; RUN_USER will automatically detect the current user - but you can set it here change it if you run locally +RUN_USER = ; git +;; +;; Application run mode, affects performance and debugging. Either "dev", "prod" or "test", default is "prod" +RUN_MODE = ; prod +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; [server] -; The protocol the server listens on. One of 'http', 'https', 'unix' or 'fcgi'. -PROTOCOL = http -DOMAIN = localhost -ROOT_URL = %(PROTOCOL)s://%(DOMAIN)s:%(HTTP_PORT)s/ -; The address to listen on. Either a IPv4/IPv6 address or the path to a unix socket. -HTTP_ADDR = 0.0.0.0 -HTTP_PORT = 3000 -; If REDIRECT_OTHER_PORT is true, and PROTOCOL is set to https an http server -; will be started on PORT_TO_REDIRECT and it will redirect plain, non-secure http requests to the main -; ROOT_URL. Defaults are false for REDIRECT_OTHER_PORT and 80 for -; PORT_TO_REDIRECT. -REDIRECT_OTHER_PORT = false -PORT_TO_REDIRECT = 80 -; Permission for unix socket -UNIX_SOCKET_PERMISSION = 666 -; Local (DMZ) URL for Gitea workers (such as SSH update) accessing web service. -; In most cases you do not need to change the default value. -; Alter it only if your SSH server node is not the same as HTTP node. -; Do not set this variable if PROTOCOL is set to 'unix'. -LOCAL_ROOT_URL = %(PROTOCOL)s://%(HTTP_ADDR)s:%(HTTP_PORT)s/ -; Disable SSH feature when not available -DISABLE_SSH = false -; Whether to use the builtin SSH server or not. -START_SSH_SERVER = false -; Username to use for the builtin SSH server. If blank, then it is the value of RUN_USER. -BUILTIN_SSH_SERVER_USER = -; Domain name to be exposed in clone URL -SSH_DOMAIN = %(DOMAIN)s -; The network interface the builtin SSH server should listen on -SSH_LISTEN_HOST = -; Port number to be exposed in clone URL -SSH_PORT = 22 -; The port number the builtin SSH server should listen on -SSH_LISTEN_PORT = %(SSH_PORT)s -; Root path of SSH directory, default is '~/.ssh', but you have to use '/home/git/.ssh'. -SSH_ROOT_PATH = -; Gitea will create a authorized_keys file by default when it is not using the internal ssh server -; If you intend to use the AuthorizedKeysCommand functionality then you should turn this off. -SSH_CREATE_AUTHORIZED_KEYS_FILE = true -; For the built-in SSH server, choose the ciphers to support for SSH connections, -; for system SSH this setting has no effect -SSH_SERVER_CIPHERS = aes128-ctr, aes192-ctr, aes256-ctr, aes128-gcm@openssh.com, arcfour256, arcfour128 -; For the built-in SSH server, choose the key exchange algorithms to support for SSH connections, -; for system SSH this setting has no effect -SSH_SERVER_KEY_EXCHANGES = diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, curve25519-sha256@libssh.org -; For the built-in SSH server, choose the MACs to support for SSH connections, -; for system SSH this setting has no effect -SSH_SERVER_MACS = hmac-sha2-256-etm@openssh.com, hmac-sha2-256, hmac-sha1, hmac-sha1-96 -; Directory to create temporary files in when testing public keys using ssh-keygen, -; default is the system temporary directory. -SSH_KEY_TEST_PATH = -; Path to ssh-keygen, default is 'ssh-keygen' which means the shell is responsible for finding out which one to call. -SSH_KEYGEN_PATH = ssh-keygen -; Enable SSH Authorized Key Backup when rewriting all keys, default is true -SSH_BACKUP_AUTHORIZED_KEYS = true -; Enable exposure of SSH clone URL to anonymous visitors, default is false -SSH_EXPOSE_ANONYMOUS = false -; Indicate whether to check minimum key size with corresponding type -MINIMUM_KEY_SIZE_CHECK = false -; Disable CDN even in "prod" mode -OFFLINE_MODE = false -DISABLE_ROUTER_LOG = false -; Generate steps: -; $ ./gitea cert -ca=true -duration=8760h0m0s -host=myhost.example.com -; -; Or from a .pfx file exported from the Windows certificate store (do -; not forget to export the private key): -; $ openssl pkcs12 -in cert.pfx -out cert.pem -nokeys -; $ openssl pkcs12 -in cert.pfx -out key.pem -nocerts -nodes -CERT_FILE = custom/https/cert.pem -KEY_FILE = custom/https/key.pem -; Root directory containing templates and static files. -; default is the path where Gitea is executed -STATIC_ROOT_PATH = -; Default path for App data -APP_DATA_PATH = data -; Application level GZIP support -ENABLE_GZIP = false -; Application profiling (memory and cpu) -; For "web" command it listens on localhost:6060 -; For "serve" command it dumps to disk at PPROF_DATA_PATH as (cpuprofile|memprofile)__ -ENABLE_PPROF = false -; PPROF_DATA_PATH, use an absolute path when you start gitea as service -PPROF_DATA_PATH = data/tmp/pprof -; Landing page, can be "home", "explore", or "organizations" -LANDING_PAGE = home -; Enables git-lfs support. true or false, default is false. -LFS_START_SERVER = false -; Where your lfs files reside, default is data/lfs. -LFS_CONTENT_PATH = data/lfs -; LFS authentication secret, change this yourself +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; The protocol the server listens on. One of 'http', 'https', 'unix' or 'fcgi'. Defaults to 'http' +;PROTOCOL = http +;; +;; Set the domain for the server +;DOMAIN = localhost +;; +;; Overwrite the automatically generated public URL. Necessary for proxies and docker. +;ROOT_URL = %(PROTOCOL)s://%(DOMAIN)s:%(HTTP_PORT)s/ +;; +;; when STATIC_URL_PREFIX is empty it will follow ROOT_URL +;STATIC_URL_PREFIX = +;; +;; The address to listen on. Either a IPv4/IPv6 address or the path to a unix socket. +;HTTP_ADDR = 0.0.0.0 +;; +;; The port to listen on. Leave empty when using a unix socket. +;HTTP_PORT = 3000 +;; +;; If REDIRECT_OTHER_PORT is true, and PROTOCOL is set to https an http server +;; will be started on PORT_TO_REDIRECT and it will redirect plain, non-secure http requests to the main +;; ROOT_URL. Defaults are false for REDIRECT_OTHER_PORT and 80 for +;; PORT_TO_REDIRECT. +;REDIRECT_OTHER_PORT = false +;PORT_TO_REDIRECT = 80 +;; +;; Minimum and maximum supported TLS versions +;SSL_MIN_VERSION=TLSv1.2 +;SSL_MAX_VERSION= +;; +;; SSL Curve Preferences +;SSL_CURVE_PREFERENCES=X25519,P256 +;; +;; SSL Cipher Suites +;SSL_CIPHER_SUITES=; Will default to "ecdhe_ecdsa_with_aes_256_gcm_sha384,ecdhe_rsa_with_aes_256_gcm_sha384,ecdhe_ecdsa_with_aes_128_gcm_sha256,ecdhe_rsa_with_aes_128_gcm_sha256,ecdhe_ecdsa_with_chacha20_poly1305,ecdhe_rsa_with_chacha20_poly1305" if aes is supported by hardware, otherwise chacha will be first. +;; +;; Timeout for any write to the connection. (Set to 0 to disable all timeouts.) +;PER_WRITE_TIMEOUT = 30s +;; +;; Timeout per Kb written to connections. +;PER_WRITE_PER_KB_TIMEOUT = 30s +;; +;; Permission for unix socket +;UNIX_SOCKET_PERMISSION = 666 +;; +;; Local (DMZ) URL for Gitea workers (such as SSH update) accessing web service. +;; In most cases you do not need to change the default value. +;; Alter it only if your SSH server node is not the same as HTTP node. +;; Do not set this variable if PROTOCOL is set to 'unix'. +;LOCAL_ROOT_URL = %(PROTOCOL)s://%(HTTP_ADDR)s:%(HTTP_PORT)s/ +;; +;; Disable SSH feature when not available +;DISABLE_SSH = false +;; +;; Whether to use the builtin SSH server or not. +;START_SSH_SERVER = false +;; +;; Username to use for the builtin SSH server. If blank, then it is the value of RUN_USER. +;BUILTIN_SSH_SERVER_USER = +;; +;; Domain name to be exposed in clone URL +;SSH_DOMAIN = %(DOMAIN)s +;; +;; The network interface the builtin SSH server should listen on +;SSH_LISTEN_HOST = +;; +;; Port number to be exposed in clone URL +;SSH_PORT = 22 +;; +;; The port number the builtin SSH server should listen on +;SSH_LISTEN_PORT = %(SSH_PORT)s +;; +;; Root path of SSH directory, default is '~/.ssh', but you have to use '/home/git/.ssh'. +;SSH_ROOT_PATH = +;; +;; Gitea will create a authorized_keys file by default when it is not using the internal ssh server +;; If you intend to use the AuthorizedKeysCommand functionality then you should turn this off. +;SSH_CREATE_AUTHORIZED_KEYS_FILE = true +;; +;; Gitea will create a authorized_principals file by default when it is not using the internal ssh server +;; If you intend to use the AuthorizedPrincipalsCommand functionality then you should turn this off. +;SSH_CREATE_AUTHORIZED_PRINCIPALS_FILE = true +;; +;; For the built-in SSH server, choose the ciphers to support for SSH connections, +;; for system SSH this setting has no effect +;SSH_SERVER_CIPHERS = aes128-ctr, aes192-ctr, aes256-ctr, aes128-gcm@openssh.com, arcfour256, arcfour128 +;; +;; For the built-in SSH server, choose the key exchange algorithms to support for SSH connections, +;; for system SSH this setting has no effect +;SSH_SERVER_KEY_EXCHANGES = diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, curve25519-sha256@libssh.org +;; +;; For the built-in SSH server, choose the MACs to support for SSH connections, +;; for system SSH this setting has no effect +;SSH_SERVER_MACS = hmac-sha2-256-etm@openssh.com, hmac-sha2-256, hmac-sha1, hmac-sha1-96 +;; +;; For the built-in SSH server, choose the keypair to offer as the host key +;; The private key should be at SSH_SERVER_HOST_KEY and the public SSH_SERVER_HOST_KEY.pub +;; relative paths are made absolute relative to the APP_DATA_PATH +;SSH_SERVER_HOST_KEYS=ssh/gitea.rsa, ssh/gogs.rsa +;; +;; Directory to create temporary files in when testing public keys using ssh-keygen, +;; default is the system temporary directory. +;SSH_KEY_TEST_PATH = +;; +;; Path to ssh-keygen, default is 'ssh-keygen' which means the shell is responsible for finding out which one to call. +;SSH_KEYGEN_PATH = ssh-keygen +;; +;; Enable SSH Authorized Key Backup when rewriting all keys, default is true +;SSH_AUTHORIZED_KEYS_BACKUP = true +;; +;; Determines which principals to allow +;; - empty: if SSH_TRUSTED_USER_CA_KEYS is empty this will default to off, otherwise will default to email, username. +;; - off: Do not allow authorized principals +;; - email: the principal must match the user's email +;; - username: the principal must match the user's username +;; - anything: there will be no checking on the content of the principal +;SSH_AUTHORIZED_PRINCIPALS_ALLOW = email, username +;; +;; Enable SSH Authorized Principals Backup when rewriting all keys, default is true +;SSH_AUTHORIZED_PRINCIPALS_BACKUP = true +;; +;; Specifies the public keys of certificate authorities that are trusted to sign user certificates for authentication. +;; Multiple keys should be comma separated. +;; E.g."ssh- ". or "ssh- , ssh- ". +;; For more information see "TrustedUserCAKeys" in the sshd config manpages. +;SSH_TRUSTED_USER_CA_KEYS = +;; Absolute path of the `TrustedUserCaKeys` file gitea will manage. +;; Default this `RUN_USER`/.ssh/gitea-trusted-user-ca-keys.pem +;; If you're running your own ssh server and you want to use the gitea managed file you'll also need to modify your +;; sshd_config to point to this file. The official docker image will automatically work without further configuration. +;SSH_TRUSTED_USER_CA_KEYS_FILENAME = +;; +;; Enable exposure of SSH clone URL to anonymous visitors, default is false +;SSH_EXPOSE_ANONYMOUS = false +;; +;; Timeout for any write to ssh connections. (Set to 0 to disable all timeouts.) +;; Will default to the PER_WRITE_TIMEOUT. +;SSH_PER_WRITE_TIMEOUT = 30s +;; +;; Timeout per Kb written to ssh connections. +;; Will default to the PER_WRITE_PER_KB_TIMEOUT. +;SSH_PER_WRITE_PER_KB_TIMEOUT = 30s +;; +;; Indicate whether to check minimum key size with corresponding type +;MINIMUM_KEY_SIZE_CHECK = false +;; +;; Disable CDN even in "prod" mode +;OFFLINE_MODE = false +;DISABLE_ROUTER_LOG = false +;; +;; Generate steps: +;; $ ./gitea cert -ca=true -duration=8760h0m0s -host=myhost.example.com +;; +;; Or from a .pfx file exported from the Windows certificate store (do +;; not forget to export the private key): +;; $ openssl pkcs12 -in cert.pfx -out cert.pem -nokeys +;; $ openssl pkcs12 -in cert.pfx -out key.pem -nocerts -nodes +;; Paths are relative to CUSTOM_PATH +;CERT_FILE = https/cert.pem +;KEY_FILE = https/key.pem +;; +;; Root directory containing templates and static files. +;; default is the path where Gitea is executed +;STATIC_ROOT_PATH = +;; +;; Default path for App data +;APP_DATA_PATH = data +;; +;; Enable gzip compression for runtime-generated content, static resources excluded +;ENABLE_GZIP = false +;; +;; Application profiling (memory and cpu) +;; For "web" command it listens on localhost:6060 +;; For "serve" command it dumps to disk at PPROF_DATA_PATH as (cpuprofile|memprofile)__ +;ENABLE_PPROF = false +;; +;; PPROF_DATA_PATH, use an absolute path when you start gitea as service +;PPROF_DATA_PATH = data/tmp/pprof +;; +;; Landing page, can be "home", "explore", "organizations" or "login" +;; The "login" choice is not a security measure but just a UI flow change, use REQUIRE_SIGNIN_VIEW to force users to log in. +;LANDING_PAGE = home +;; +;; Enables git-lfs support. true or false, default is false. +;LFS_START_SERVER = false +;; +;; Where your lfs files reside, default is data/lfs. +;LFS_CONTENT_PATH = data/lfs +;; +;; LFS authentication secret, change this yourself LFS_JWT_SECRET = -; LFS authentication validity period (in time.Duration), pushes taking longer than this may fail. -LFS_HTTP_AUTH_EXPIRY = 20m - -; Define allowed algorithms and their minimum key length (use -1 to disable a type) -[ssh.minimum_key_sizes] -ED25519 = 256 -ECDSA = 256 -RSA = 2048 -DSA = 1024 +;; +;; LFS authentication validity period (in time.Duration), pushes taking longer than this may fail. +;LFS_HTTP_AUTH_EXPIRY = 20m +;; +;; Maximum allowed LFS file size in bytes (Set to 0 for no limit). +;LFS_MAX_FILE_SIZE = 0 +;; +;; Maximum number of locks returned per page +;LFS_LOCKS_PAGING_NUM = 50 +;; +;; Allow graceful restarts using SIGHUP to fork +;ALLOW_GRACEFUL_RESTARTS = true +;; +;; After a restart the parent will finish ongoing requests before +;; shutting down. Force shutdown if this process takes longer than this delay. +;; set to a negative value to disable +;GRACEFUL_HAMMER_TIME = 60s +;; +;; Allows the setting of a startup timeout and waithint for Windows as SVC service +;; 0 disables this. +;STARTUP_TIMEOUT = 0 +;; +;; Static resources, includes resources on custom/, public/ and all uploaded avatars web browser cache time. Note that this cache is disabled when RUN_MODE is "dev". Default is 6h +;STATIC_CACHE_TIME = 6h +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; [database] -; Either "mysql", "postgres", "mssql" or "sqlite3", it's your choice +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Database to use. Either "mysql", "postgres", "mssql" or "sqlite3". +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; MySQL Configuration +;; DB_TYPE = mysql -HOST = 127.0.0.1:3306 +HOST = 127.0.0.1:3306 ; can use socket e.g. /var/run/mysqld/mysqld.sock NAME = gitea USER = root -; Use PASSWD = `your password` for quoting if you use special characters in the password. -PASSWD = -; For Postgres, either "disable" (default), "require", or "verify-full" -; For MySQL, either "false" (default), "true", or "skip-verify" -SSL_MODE = disable -; For MySQL only, either "utf8" or "utf8mb4", default is "utf8". -; NOTICE: for "utf8mb4" you must use MySQL InnoDB > 5.6. Gitea is unable to check this. -CHARSET = utf8 -; For "sqlite3" and "tidb", use an absolute path when you start gitea as service -PATH = data/gitea.db -; For "sqlite3" only. Query timeout -SQLITE_TIMEOUT = 500 -; For iterate buffer, default is 50 -ITERATE_BUFFER_SIZE = 50 -; Show the database generated SQL -LOG_SQL = true -; Maximum number of DB Connect retries -DB_RETRIES = 10 -; Backoff time per DB retry (time.Duration) -DB_RETRY_BACKOFF = 3s - -[indexer] -; Issue indexer type, currently support: bleve or db, default is bleve -ISSUE_INDEXER_TYPE = bleve -; Issue indexer storage path, available when ISSUE_INDEXER_TYPE is bleve -ISSUE_INDEXER_PATH = indexers/issues.bleve -; Issue indexer queue, currently support: channel or levelqueue, default is levelqueue -ISSUE_INDEXER_QUEUE_TYPE = levelqueue -; When ISSUE_INDEXER_QUEUE_TYPE is levelqueue, this will be the queue will be saved path, -; default is indexers/issues.queue -ISSUE_INDEXER_QUEUE_DIR = indexers/issues.queue -; When `ISSUE_INDEXER_QUEUE_TYPE` is `redis`, this will store the redis connection string. -ISSUE_INDEXER_QUEUE_CONN_STR = "addrs=127.0.0.1:6379 db=0" -; Batch queue number, default is 20 -ISSUE_INDEXER_QUEUE_BATCH_NUMBER = 20 - -; repo indexer by default disabled, since it uses a lot of disk space -REPO_INDEXER_ENABLED = false -REPO_INDEXER_PATH = indexers/repos.bleve -UPDATE_BUFFER_LEN = 20 -MAX_FILE_SIZE = 1048576 - -[admin] -; Disallow regular (non-admin) users from creating organizations. -DISABLE_REGULAR_ORG_CREATION = false +;PASSWD = ;Use PASSWD = `your password` for quoting if you use special characters in the password. +;SSL_MODE = false ; either "false" (default), "true", or "skip-verify" +;CHARSET = utf8mb4 ;either "utf8" or "utf8mb4", default is "utf8mb4". +;; +;; NOTICE: for "utf8mb4" you must use MySQL InnoDB > 5.6. Gitea is unable to check this. +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Postgres Configuration +;; +;DB_TYPE = postgres +;HOST = 127.0.0.1:5432 ; can use socket e.g. /var/run/postgresql/ +;NAME = gitea +;USER = root +;PASSWD = +;SCHEMA = +;SSL_MODE=disable ;either "disable" (default), "require", or "verify-full" +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; SQLite Configuration +;; +;DB_TYPE = sqlite3 +;PATH= ; defaults to data/gitea.db +;SQLITE_TIMEOUT = ; Query timeout defaults to: 500 +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; MSSQL Configuration +;; +;DB_TYPE = mssql +;HOST = 172.17.0.2:1433 +;NAME = gitea +;USER = SA +;PASSWD = MwantsaSecurePassword1 +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Other settings +;; +;; For iterate buffer, default is 50 +;ITERATE_BUFFER_SIZE = 50 +;; +;; Show the database generated SQL +LOG_SQL = false ; if unset defaults to true +;; +;; Maximum number of DB Connect retries +;DB_RETRIES = 10 +;; +;; Backoff time per DB retry (time.Duration) +;DB_RETRY_BACKOFF = 3s +;; +;; Max idle database connections on connection pool, default is 2 +;MAX_IDLE_CONNS = 2 +;; +;; Database connection max life time, default is 0 or 3s mysql (See #6804 & #7071 for reasoning) +;CONN_MAX_LIFETIME = 3s +;; +;; Database maximum number of open connections, default is 0 meaning no maximum +;MAX_OPEN_CONNS = 0 +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; [security] -; Whether the installer is disabled +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Whether the installer is disabled (set to true to disable the installer) INSTALL_LOCK = false -; !!CHANGE THIS TO KEEP YOUR USER DATA SAFE!! -SECRET_KEY = !#@FDEWREWR&*( -; How long to remember that an user is logged in before requiring relogin (in days) -LOGIN_REMEMBER_DAYS = 7 -COOKIE_USERNAME = gitea_awesome -COOKIE_REMEMBER_NAME = gitea_incredible -; Reverse proxy authentication header name of user name -REVERSE_PROXY_AUTHENTICATION_USER = X-WEBAUTH-USER -REVERSE_PROXY_AUTHENTICATION_EMAIL = X-WEBAUTH-EMAIL -; The minimum password length for new Users -MIN_PASSWORD_LENGTH = 6 -; Set to true to allow users to import local server paths -IMPORT_LOCAL_PATHS = false -; Set to true to prevent all users (including admin) from creating custom git hooks -DISABLE_GIT_HOOKS = false - -[openid] -; -; OpenID is an open, standard and decentralized authentication protocol. -; Your identity is the address of a webpage you provide, which describes -; how to prove you are in control of that page. -; -; For more info: https://en.wikipedia.org/wiki/OpenID -; -; Current implementation supports OpenID-2.0 -; -; Tested to work providers at the time of writing: -; - Any GNUSocial node (your.hostname.tld/username) -; - Any SimpleID provider (http://simpleid.koinic.net) -; - http://openid.org.cn/ -; - openid.stackexchange.com -; - login.launchpad.net -; - .livejournal.com -; -; Whether to allow signin in via OpenID -ENABLE_OPENID_SIGNIN = true -; Whether to allow registering via OpenID -; Do not include to rely on rhw DISABLE_REGISTRATION setting -;ENABLE_OPENID_SIGNUP = true -; Allowed URI patterns (POSIX regexp). -; Space separated. -; Only these would be allowed if non-blank. -; Example value: trusted.domain.org trusted.domain.net -WHITELISTED_URIS = -; Forbidden URI patterns (POSIX regexp). -; Space separated. -; Only used if WHITELISTED_URIS is blank. -; Example value: loadaverage.org/badguy stackexchange.com/.*spammer -BLACKLISTED_URIS = - -[service] -; Time limit to confirm account/email registration -ACTIVE_CODE_LIVE_MINUTES = 180 -; Time limit to perform the reset of a forgotten password -RESET_PASSWD_CODE_LIVE_MINUTES = 180 -; Whether a new user needs to confirm their email when registering. -REGISTER_EMAIL_CONFIRM = false -; List of domain names that are allowed to be used to register on a Gitea instance -; gitea.io,example.com -EMAIL_DOMAIN_WHITELIST= -; Disallow registration, only allow admins to create accounts. -DISABLE_REGISTRATION = false -; Allow registration only using third-party services, it works only when DISABLE_REGISTRATION is false -ALLOW_ONLY_EXTERNAL_REGISTRATION = false -; User must sign in to view anything. -REQUIRE_SIGNIN_VIEW = false -; Mail notification -ENABLE_NOTIFY_MAIL = false -; More detail: https://github.com/gogits/gogs/issues/165 -ENABLE_REVERSE_PROXY_AUTHENTICATION = false -ENABLE_REVERSE_PROXY_AUTO_REGISTRATION = false -ENABLE_REVERSE_PROXY_EMAIL = false -; Enable captcha validation for registration -ENABLE_CAPTCHA = false -; Type of captcha you want to use. Options: image, recaptcha -CAPTCHA_TYPE = image -; Enable recaptcha to use Google's recaptcha service -; Go to https://www.google.com/recaptcha/admin to sign up for a key -RECAPTCHA_SECRET = -RECAPTCHA_SITEKEY = -; Change this to use recaptcha.net or other recaptcha service -RECAPTCHA_URL = https://www.google.com/recaptcha/ -; Default value for KeepEmailPrivate -; Each new user will get the value of this setting copied into their profile -DEFAULT_KEEP_EMAIL_PRIVATE = false -; Default value for AllowCreateOrganization -; Every new user will have rights set to create organizations depending on this setting -DEFAULT_ALLOW_CREATE_ORGANIZATION = true -; Either "public", "limited" or "private", default is "public" -; Limited is for signed user only -; Private is only for member of the organization -; Public is for everyone -DEFAULT_ORG_VISIBILITY = public -; Default value for EnableDependencies -; Repositories will use dependencies by default depending on this setting -DEFAULT_ENABLE_DEPENDENCIES = true -; Enable heatmap on users profiles. -ENABLE_USER_HEATMAP = true -; Enable Timetracking -ENABLE_TIMETRACKING = true -; Default value for EnableTimetracking -; Repositories will use timetracking by default depending on this setting -DEFAULT_ENABLE_TIMETRACKING = true -; Default value for AllowOnlyContributorsToTrackTime -; Only users with write permissions can track time if this is true -DEFAULT_ALLOW_ONLY_CONTRIBUTORS_TO_TRACK_TIME = true -; Default value for the domain part of the user's email address in the git log -; if he has set KeepEmailPrivate to true. The user's email will be replaced with a -; concatenation of the user name in lower case, "@" and NO_REPLY_ADDRESS. -NO_REPLY_ADDRESS = noreply.example.org -; Show Registration button -SHOW_REGISTRATION_BUTTON = true -; Default value for AutoWatchNewRepos -; When adding a repo to a team or creating a new repo all team members will watch the -; repo automatically if enabled -AUTO_WATCH_NEW_REPOS = true - -[webhook] -; Hook task queue length, increase if webhook shooting starts hanging -QUEUE_LENGTH = 1000 -; Deliver timeout in seconds -DELIVER_TIMEOUT = 5 -; Allow insecure certification -SKIP_TLS_VERIFY = false -; Number of history information in each page -PAGING_NUM = 10 - -[mailer] -ENABLED = false -; Buffer length of channel, keep it as it is if you don't know what it is. -SEND_BUFFER_LEN = 100 -; Prefix displayed before subject in mail -SUBJECT_PREFIX = -; Mail server -; Gmail: smtp.gmail.com:587 -; QQ: smtp.qq.com:465 -; Note, if the port ends with "465", SMTPS will be used. Using STARTTLS on port 587 is recommended per RFC 6409. If the server supports STARTTLS it will always be used. -HOST = -; Disable HELO operation when hostnames are different. -DISABLE_HELO = -; Custom hostname for HELO operation, if no value is provided, one is retrieved from system. -HELO_HOSTNAME = -; Do not verify the certificate of the server. Only use this for self-signed certificates -SKIP_VERIFY = -; Use client certificate -USE_CERTIFICATE = false -CERT_FILE = custom/mailer/cert.pem -KEY_FILE = custom/mailer/key.pem -; Should SMTP connection use TLS -IS_TLS_ENABLED = false -; Mail from address, RFC 5322. This can be just an email address, or the `"Name" ` format -FROM = -; Mailer user name and password -USER = -; Use PASSWD = `your password` for quoting if you use special characters in the password. -PASSWD = -; Send mails as plain text -SEND_AS_PLAIN_TEXT = false -; Set Mailer Type (either SMTP, sendmail or dummy to just send to the log) -MAILER_TYPE = smtp -; Specify an alternative sendmail binary -SENDMAIL_PATH = sendmail -; Specify any extra sendmail arguments -SENDMAIL_ARGS = - -[cache] -; Either "memory", "redis", or "memcache", default is "memory" -ADAPTER = memory -; For "memory" only, GC interval in seconds, default is 60 -INTERVAL = 60 -; For "redis" and "memcache", connection host address -; redis: network=tcp,addr=:6379,password=macaron,db=0,pool_size=100,idle_timeout=180 -; memcache: `127.0.0.1:11211` -HOST = -; Time to keep items in cache if not used, default is 16 hours. -; Setting it to 0 disables caching -ITEM_TTL = 16h - -[session] -; Either "memory", "file", or "redis", default is "memory" -PROVIDER = memory -; Provider config options -; memory: doesn't have any config yet -; file: session file path, e.g. `data/sessions` -; redis: network=tcp,addr=:6379,password=macaron,db=0,pool_size=100,idle_timeout=180 -; mysql: go-sql-driver/mysql dsn config string, e.g. `root:password@/session_table` -PROVIDER_CONFIG = data/sessions -; Session cookie name -COOKIE_NAME = i_like_gitea -; If you use session in https only, default is false -COOKIE_SECURE = false -; Enable set cookie, default is true -ENABLE_SET_COOKIE = true -; Session GC time interval in seconds, default is 86400 (1 day) -GC_INTERVAL_TIME = 86400 -; Session life time in seconds, default is 86400 (1 day) -SESSION_LIFE_TIME = 86400 - -[picture] -AVATAR_UPLOAD_PATH = data/avatars -REPOSITORY_AVATAR_UPLOAD_PATH = data/repo-avatars -; How Gitea deals with missing repository avatars -; none = no avatar will be displayed; random = random avatar will be displayed; image = default image will be used -REPOSITORY_AVATAR_FALLBACK = none -REPOSITORY_AVATAR_FALLBACK_IMAGE = /img/repo_default.png -; Max Width and Height of uploaded avatars. -; This is to limit the amount of RAM used when resizing the image. -AVATAR_MAX_WIDTH = 4096 -AVATAR_MAX_HEIGHT = 3072 -; Maximum alloved file size for uploaded avatars. -; This is to limit the amount of RAM used when resizing the image. -AVATAR_MAX_FILE_SIZE = 1048576 -; Chinese users can choose "duoshuo" -; or a custom avatar source, like: http://cn.gravatar.com/avatar/ -GRAVATAR_SOURCE = gravatar -; This value will always be true in offline mode. -DISABLE_GRAVATAR = false -; Federated avatar lookup uses DNS to discover avatar associated -; with emails, see https://www.libravatar.org -; This value will always be false in offline mode or when Gravatar is disabled. -ENABLE_FEDERATED_AVATAR = false - -[attachment] -; Whether attachments are enabled. Defaults to `true` -ENABLED = true -; Path for attachments. Defaults to `data/attachments` -PATH = data/attachments -; One or more allowed types, e.g. image/jpeg|image/png -ALLOWED_TYPES = image/jpeg|image/png|application/zip|application/gzip -; Max size of each file. Defaults to 4MB -MAX_SIZE = 4 -; Max number of files per upload. Defaults to 5 -MAX_FILES = 5 - -[time] -; Specifies the format for fully outputted dates. Defaults to RFC1123 -; Special supported values are ANSIC, UnixDate, RubyDate, RFC822, RFC822Z, RFC850, RFC1123, RFC1123Z, RFC3339, RFC3339Nano, Kitchen, Stamp, StampMilli, StampMicro and StampNano -; For more information about the format see http://golang.org/pkg/time/#pkg-constants -FORMAT = - -[log] -ROOT_PATH = -; Either "console", "file", "conn", "smtp" or "database", default is "console" -; Use comma to separate multiple modes, e.g. "console, file" -MODE = console -; Buffer length of the channel, keep it as it is if you don't know what it is. -BUFFER_LEN = 10000 -REDIRECT_MACARON_LOG = false -MACARON = file -; Either "Trace", "Debug", "Info", "Warn", "Error", "Critical", default is "Info" -ROUTER_LOG_LEVEL = Info -ROUTER = console -ENABLE_ACCESS_LOG = false -ACCESS_LOG_TEMPLATE = {{.Ctx.RemoteAddr}} - {{.Identity}} {{.Start.Format "[02/Jan/2006:15:04:05 -0700]" }} "{{.Ctx.Req.Method}} {{.Ctx.Req.RequestURI}} {{.Ctx.Req.Proto}}" {{.ResponseWriter.Status}} {{.ResponseWriter.Size}} "{{.Ctx.Req.Referer}}\" \"{{.Ctx.Req.UserAgent}}" -ACCESS = file -; Either "Trace", "Debug", "Info", "Warn", "Error", "Critical", default is "Trace" -LEVEL = Info -; Either "Trace", "Debug", "Info", "Warn", "Error", "Critical", default is "None" -STACKTRACE_LEVEL = None - -; Generic log modes -[log.x] -FLAGS = stdflags -EXPRESSION = -PREFIX = -COLORIZE = false - -; For "console" mode only -[log.console] -LEVEL = -STDERR = false - -; For "file" mode only -[log.file] -LEVEL = -; Set the file_name for the logger. If this is a relative path this -; will be relative to ROOT_PATH -FILE_NAME = -; This enables automated log rotate(switch of following options), default is true -LOG_ROTATE = true -; Max number of lines in a single file, default is 1000000 -MAX_LINES = 1000000 -; Max size shift of a single file, default is 28 means 1 << 28, 256MB -MAX_SIZE_SHIFT = 28 -; Segment log daily, default is true -DAILY_ROTATE = true -; delete the log file after n days, default is 7 -MAX_DAYS = 7 -; compress logs with gzip -COMPRESS = true -; compression level see godoc for compress/gzip -COMPRESSION_LEVEL = -1 - -; For "conn" mode only -[log.conn] -LEVEL = -; Reconnect host for every single message, default is false -RECONNECT_ON_MSG = false -; Try to reconnect when connection is lost, default is false -RECONNECT = false -; Either "tcp", "unix" or "udp", default is "tcp" -PROTOCOL = tcp -; Host address -ADDR = - -; For "smtp" mode only -[log.smtp] -LEVEL = -; Name displayed in mail title, default is "Diagnostic message from server" -SUBJECT = Diagnostic message from server -; Mail server -HOST = -; Mailer user name and password -USER = -; Use PASSWD = `your password` for quoting if you use special characters in the password. -PASSWD = -; Receivers, can be one or more, e.g. 1@example.com,2@example.com -RECEIVERS = - -[cron] -; Enable running cron tasks periodically. -ENABLED = true -; Run cron tasks when Gitea starts. -RUN_AT_START = false - -; Update mirrors -[cron.update_mirrors] -SCHEDULE = @every 10m - -; Repository health check -[cron.repo_health_check] -SCHEDULE = @every 24h -TIMEOUT = 60s -; Arguments for command 'git fsck', e.g. "--unreachable --tags" -; see more on http://git-scm.com/docs/git-fsck -ARGS = - -; Check repository statistics -[cron.check_repo_stats] -RUN_AT_START = true -SCHEDULE = @every 24h - -; Clean up old repository archives -[cron.archive_cleanup] -; Whether to enable the job -ENABLED = true -; Whether to always run at least once at start up time (if ENABLED) -RUN_AT_START = true -; Time interval for job to run -SCHEDULE = @every 24h -; Archives created more than OLDER_THAN ago are subject to deletion -OLDER_THAN = 24h - -; Synchronize external user data (only LDAP user synchronization is supported) -[cron.sync_external_users] -; Synchronize external user data when starting server (default false) -RUN_AT_START = false -; Interval as a duration between each synchronization (default every 24h) -SCHEDULE = @every 24h -; Create new users, update existing user data and disable users that are not in external source anymore (default) -; or only create new users if UPDATE_EXISTING is set to false -UPDATE_EXISTING = true - -[git] -; Disables highlight of added and removed changes -DISABLE_DIFF_HIGHLIGHT = false -; Max number of lines allowed in a single file in diff view -MAX_GIT_DIFF_LINES = 1000 -; Max number of allowed characters in a line in diff view -MAX_GIT_DIFF_LINE_CHARACTERS = 5000 -; Max number of files shown in diff view -MAX_GIT_DIFF_FILES = 100 -; Arguments for command 'git gc', e.g. "--aggressive --auto" -; see more on http://git-scm.com/docs/git-gc/ -GC_ARGS = -; If use git wire protocol version 2 when git version >= 2.18, default is true, set to false when you always want git wire protocol version 1 -EnableAutoGitWireProtocol = true - -; Operation timeout in seconds -[git.timeout] -DEFAULT = 360 -MIGRATE = 600 -MIRROR = 300 -CLONE = 300 -PULL = 300 -GC = 60 - -[mirror] -; Default interval as a duration between each check -DEFAULT_INTERVAL = 8h -; Min interval as a duration must be > 1m -MIN_INTERVAL = 10m - -[api] -; Enables Swagger. True or false; default is true. -ENABLE_SWAGGER = true -; Max number of items in a page -MAX_RESPONSE_ITEMS = 50 -; Default paging number of api -DEFAULT_PAGING_NUM = 30 -; Default and maximum number of items per page for git trees api -DEFAULT_GIT_TREES_PER_PAGE = 1000 -; Default size of a blob returned by the blobs API (default is 10MiB) -DEFAULT_MAX_BLOB_SIZE = 10485760 +;; +;; Global secret key that will be used - if blank will be regenerated. +SECRET_KEY = +;; +;; Secret used to validate communication within Gitea binary. +INTERNAL_TOKEN= +;; +;; Instead of defining internal token in the configuration, this configuration option can be used to give Gitea a path to a file that contains the internal token (example value: file:/etc/gitea/internal_token) +;INTERNAL_TOKEN_URI = ;e.g. /etc/gitea/internal_token +;; +;; How long to remember that a user is logged in before requiring relogin (in days) +;LOGIN_REMEMBER_DAYS = 7 +;; +;; Name of the cookie used to store the current username. +;COOKIE_USERNAME = gitea_awesome +;; +;; Name of cookie used to store authentication information. +;COOKIE_REMEMBER_NAME = gitea_incredible +;; +;; Reverse proxy authentication header name of user name and email +;REVERSE_PROXY_AUTHENTICATION_USER = X-WEBAUTH-USER +;REVERSE_PROXY_AUTHENTICATION_EMAIL = X-WEBAUTH-EMAIL +;; +;; Interpret X-Forwarded-For header or the X-Real-IP header and set this as the remote IP for the request +;REVERSE_PROXY_LIMIT = 1 +;; +;; List of IP addresses and networks separated by comma of trusted proxy servers. Use `*` to trust all. +;REVERSE_PROXY_TRUSTED_PROXIES = 127.0.0.0/8,::1/128 +;; +;; The minimum password length for new Users +;MIN_PASSWORD_LENGTH = 6 +;; +;; Set to true to allow users to import local server paths +;IMPORT_LOCAL_PATHS = false +;; +;; Set to false to allow users with git hook privileges to create custom git hooks. +;; Custom git hooks can be used to perform arbitrary code execution on the host operating system. +;; This enables the users to access and modify this config file and the Gitea database and interrupt the Gitea service. +;; By modifying the Gitea database, users can gain Gitea administrator privileges. +;; It also enables them to access other resources available to the user on the operating system that is running the Gitea instance and perform arbitrary actions in the name of the Gitea OS user. +;; WARNING: This maybe harmful to you website or your operating system. +;DISABLE_GIT_HOOKS = true +;; +;; Set to true to disable webhooks feature. +;DISABLE_WEBHOOKS = false +;; +;; Set to false to allow pushes to gitea repositories despite having an incomplete environment - NOT RECOMMENDED +;ONLY_ALLOW_PUSH_IF_GITEA_ENVIRONMENT_SET = true +;; +;;Comma separated list of character classes required to pass minimum complexity. +;;If left empty or no valid values are specified, the default is off (no checking) +;;Classes include "lower,upper,digit,spec" +;PASSWORD_COMPLEXITY = off +;; +;; Password Hash algorithm, either "argon2", "pbkdf2", "scrypt" or "bcrypt" +;PASSWORD_HASH_ALGO = pbkdf2 +;; +;; Set false to allow JavaScript to read CSRF cookie +;CSRF_COOKIE_HTTP_ONLY = true +;; +;; Validate against https://haveibeenpwned.com/Passwords to see if a password has been exposed +;PASSWORD_CHECK_PWN = false +;; +;; Cache successful token hashes. API tokens are stored in the DB as pbkdf2 hashes however, this means that there is a potentially significant hashing load when there are multiple API operations. +;; This cache will store the successfully hashed tokens in a LRU cache as a balance between performance and security. +;SUCCESSFUL_TOKENS_CACHE_SIZE = 20 +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; [oauth2] -; Enables OAuth2 provider +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Enables OAuth2 provider ENABLE = true -; Lifetime of an OAuth2 access token in seconds -ACCESS_TOKEN_EXPIRATION_TIME=3600 -; Lifetime of an OAuth2 access token in hours -REFRESH_TOKEN_EXPIRATION_TIME=730 -; Check if refresh token got already used -INVALIDATE_REFRESH_TOKENS=false -; OAuth2 authentication secret for access and refresh tokens, change this a unique string. -JWT_SECRET=Bk0yK7Y9g_p56v86KaHqjSbxvNvu3SbKoOdOt2ZcXvU - -[i18n] -LANGS = en-US,zh-CN,zh-HK,zh-TW,de-DE,fr-FR,nl-NL,lv-LV,ru-RU,uk-UA,ja-JP,es-ES,pt-BR,pl-PL,bg-BG,it-IT,fi-FI,tr-TR,cs-CZ,sr-SP,sv-SE,ko-KR -NAMES = English,简体中文,繁體中文（香港）,繁體中文（台灣）,Deutsch,français,Nederlands,latviešu,русский,Українська,日本語,español,português do Brasil,polski,български,italiano,suomi,Türkçe,čeština,српски,svenska,한국어 - -; Used for datetimepicker -[i18n.datelang] -en-US = en -zh-CN = zh -zh-HK = zh-HK -zh-TW = zh-TW -de-DE = de -fr-FR = fr -nl-NL = nl -lv-LV = lv -ru-RU = ru -uk-UA = uk -ja-JP = ja -es-ES = es -pt-BR = pt-BR -pl-PL = pl -bg-BG = bg -it-IT = it -fi-FI = fi -tr-TR = tr -cs-CZ = cs-CZ -sr-SP = sr -sv-SE = sv -ko-KR = ko +;; +;; Algorithm used to sign OAuth2 tokens. Valid values: HS256, HS384, HS512, RS256, RS384, RS512, ES256, ES384, ES512, EdDSA +;JWT_SIGNING_ALGORITHM = RS256 +;; +;; Private key file path used to sign OAuth2 tokens. The path is relative to APP_DATA_PATH. +;; This setting is only needed if JWT_SIGNING_ALGORITHM is set to RS256, RS384, RS512, ES256, ES384 or ES512. +;; The file must contain a RSA or ECDSA private key in the PKCS8 format. If no key exists a 4096 bit key will be created for you. +;JWT_SIGNING_PRIVATE_KEY_FILE = jwt/private.pem +;; +;; OAuth2 authentication secret for access and refresh tokens, change this yourself to a unique string. CLI generate option is helpful in this case. https://docs.gitea.io/en-us/command-line/#generate +;; This setting is only needed if JWT_SIGNING_ALGORITHM is set to HS256, HS384 or HS512. +;JWT_SECRET = +;; +;; Lifetime of an OAuth2 access token in seconds +;ACCESS_TOKEN_EXPIRATION_TIME = 3600 +;; +;; Lifetime of an OAuth2 refresh token in hours +;REFRESH_TOKEN_EXPIRATION_TIME = 730 +;; +;; Check if refresh token got already used +;INVALIDATE_REFRESH_TOKENS = false +;; +;; Maximum length of oauth2 token/cookie stored on server +;MAX_TOKEN_LENGTH = 32767 +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; [U2F] -; NOTE: THE DEFAULT VALUES HERE WILL NEED TO BE CHANGED -; Two Factor authentication with security keys -; https://developers.yubico.com/U2F/App_ID.html -;APP_ID = http://localhost:3000/ -; Comma seperated list of trusted facets -;TRUSTED_FACETS = http://localhost:3000/ +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; NOTE: THE DEFAULT VALUES HERE WILL NEED TO BE CHANGED +;; Two Factor authentication with security keys +;; https://developers.yubico.com/U2F/App_ID.html +;; +;; DEPRECATED - this only applies to previously registered security keys using the U2F standard +APP_ID = ; e.g. http://localhost:3000/ -; Extension mapping to highlight class -; e.g. .toml=ini -[highlight.mapping] -[other] -SHOW_FOOTER_BRANDING = false -; Show version information about Gitea and Go in the footer -SHOW_FOOTER_VERSION = true -; Show template execution time in the footer -SHOW_FOOTER_TEMPLATE_LOAD_TIME = true +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +[log] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Root path for the log files - defaults to %(GITEA_WORK_DIR)/log +;ROOT_PATH = +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Main Logger +;; +;; Either "console", "file", "conn", "smtp" or "database", default is "console" +;; Use comma to separate multiple modes, e.g. "console, file" +MODE = console +;; +;; Either "Trace", "Debug", "Info", "Warn", "Error", "Critical", default is "Trace" +LEVEL = Info +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Router Logger +;; +;; Switch off the router log +;DISABLE_ROUTER_LOG= ; false +;; +;; Set the log "modes" for the router log (if file is set the log file will default to router.log) +ROUTER = console +;; +;; The level at which the router logs +;ROUTER_LOG_LEVEL = Info +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Access Logger (Creates log in NCSA common log format) +;; +;ENABLE_ACCESS_LOG = false +;; Set the log "modes" for the access log (if file is set the log file will default to access.log) +;ACCESS = file +;; +;; Sets the template used to create the access log. +;ACCESS_LOG_TEMPLATE = {{.Ctx.RemoteAddr}} - {{.Identity}} {{.Start.Format "[02/Jan/2006:15:04:05 -0700]" }} "{{.Ctx.Req.Method}} {{.Ctx.Req.URL.RequestURI}} {{.Ctx.Req.Proto}}" {{.ResponseWriter.Status}} {{.ResponseWriter.Size}} "{{.Ctx.Req.Referer}}\" \"{{.Ctx.Req.UserAgent}}" +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; SSH log (Creates log from ssh git request) +;; +;ENABLE_SSH_LOG = false +;; +;; Other Settings +;; +;; Print Stacktraces with logs. (Rarely helpful.) Either "Trace", "Debug", "Info", "Warn", "Error", "Critical", default is "None" +;STACKTRACE_LEVEL = None +;; +;; Buffer length of the channel, keep it as it is if you don't know what it is. +;BUFFER_LEN = 10000 -[markup.asciidoc] -ENABLED = false -; List of file extensions that should be rendered by an external command -FILE_EXTENSIONS = .adoc,.asciidoc -; External command to render all matching extensions -RENDER_COMMAND = "asciidoc --out-file=- -" -; Don't pass the file on STDIN, pass the filename as argument instead. -IS_INPUT_FILE = false +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Creating specific log configuration +;; +;; You can set specific configuration for individual modes and subloggers +;; +;; Configuration available to all log modes/subloggers +;LEVEL= +;FLAGS = stdflags +;EXPRESSION = +;PREFIX = +;COLORIZE = false +;; +;; For "console" mode only +;STDERR = false +;; +;; For "file" mode only +;LEVEL = +;; Set the file_name for the logger. If this is a relative path this +;; will be relative to ROOT_PATH +;FILE_NAME = +;; This enables automated log rotate(switch of following options), default is true +;LOG_ROTATE = true +;; Max size shift of a single file, default is 28 means 1 << 28, 256MB +;MAX_SIZE_SHIFT = 28 +;; Segment log daily, default is true +;DAILY_ROTATE = true +;; delete the log file after n days, default is 7 +;MAX_DAYS = 7 +;; compress logs with gzip +;COMPRESS = true +;; compression level see godoc for compress/gzip +;COMPRESSION_LEVEL = -1 +; +;; For "conn" mode only +;LEVEL = +;; Reconnect host for every single message, default is false +;RECONNECT_ON_MSG = false +;; Try to reconnect when connection is lost, default is false +;RECONNECT = false +;; Either "tcp", "unix" or "udp", default is "tcp" +;PROTOCOL = tcp +;; Host address +;ADDR = +; +;; For "smtp" mode only +;LEVEL = +;; Name displayed in mail title, default is "Diagnostic message from server" +;SUBJECT = Diagnostic message from server +;; Mail server +;HOST = +;; Mailer user name and password +;USER = +;; Use PASSWD = `your password` for quoting if you use special characters in the password. +;PASSWD = +;; Receivers, can be one or more, e.g. 1@example.com,2@example.com +;RECEIVERS = -[metrics] -; Enables metrics endpoint. True or false; default is false. -ENABLED = false -; If you want to add authorization, specify a token here -TOKEN = +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +[git] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; The path of git executable. If empty, Gitea searches through the PATH environment. +PATH = +;; +;; Disables highlight of added and removed changes +;DISABLE_DIFF_HIGHLIGHT = false +;; +;; Max number of lines allowed in a single file in diff view +;MAX_GIT_DIFF_LINES = 1000 +;; +;; Max number of allowed characters in a line in diff view +;MAX_GIT_DIFF_LINE_CHARACTERS = 5000 +;; +;; Max number of files shown in diff view +;MAX_GIT_DIFF_FILES = 100 +;; +;; Set the default commits range size +;COMMITS_RANGE_SIZE = 50 +;; +;; Set the default branches range size +;BRANCHES_RANGE_SIZE = 20 +;; +;; Arguments for command 'git gc', e.g. "--aggressive --auto" +;; see more on http://git-scm.com/docs/git-gc/ +;GC_ARGS = +;; +;; If use git wire protocol version 2 when git version >= 2.18, default is true, set to false when you always want git wire protocol version 1 +;ENABLE_AUTO_GIT_WIRE_PROTOCOL = true +;; +;; Respond to pushes to a non-default branch with a URL for creating a Pull Request (if the repository has them enabled) +;PULL_REQUEST_PUSH_MESSAGE = true +;; +;; (Go-Git only) Don't cache objects greater than this in memory. (Set to 0 to disable.) +;LARGE_OBJECT_THRESHOLD = 1048576 +;; Set to true to forcibly set core.protectNTFS=false +;DISABLE_CORE_PROTECT_NTFS=false +;; Disable the usage of using partial clones for git. +;DISABLE_PARTIAL_CLONE = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +[service] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Time limit to confirm account/email registration +;ACTIVE_CODE_LIVE_MINUTES = 180 +;; +;; Time limit to perform the reset of a forgotten password +;RESET_PASSWD_CODE_LIVE_MINUTES = 180 +;; +;; Whether a new user needs to confirm their email when registering. +;REGISTER_EMAIL_CONFIRM = false +;; +;; Whether a new user needs to be confirmed manually after registration. (Requires `REGISTER_EMAIL_CONFIRM` to be disabled.) +;REGISTER_MANUAL_CONFIRM = false +;; +;; List of domain names that are allowed to be used to register on a Gitea instance +;; gitea.io,example.com +;EMAIL_DOMAIN_WHITELIST = +;; +;; Comma-separated list of domain names that are not allowed to be used to register on a Gitea instance +;EMAIL_DOMAIN_BLOCKLIST = +;; +;; Disallow registration, only allow admins to create accounts. +;DISABLE_REGISTRATION = false +;; +;; Allow registration only using gitea itself, it works only when DISABLE_REGISTRATION is false +;ALLOW_ONLY_INTERNAL_REGISTRATION = false +;; +;; Allow registration only using third-party services, it works only when DISABLE_REGISTRATION is false +;ALLOW_ONLY_EXTERNAL_REGISTRATION = false +;; +;; User must sign in to view anything. +;REQUIRE_SIGNIN_VIEW = false +;; +;; Mail notification +;ENABLE_NOTIFY_MAIL = false +;; +;; This setting enables gitea to be signed in with HTTP BASIC Authentication using the user's password +;; If you set this to false you will not be able to access the tokens endpoints on the API with your password +;; Please note that setting this to false will not disable OAuth Basic or Basic authentication using a token +;ENABLE_BASIC_AUTHENTICATION = true +;; +;; More detail: https://github.com/gogits/gogs/issues/165 +;ENABLE_REVERSE_PROXY_AUTHENTICATION = false +;ENABLE_REVERSE_PROXY_AUTO_REGISTRATION = false +;ENABLE_REVERSE_PROXY_EMAIL = false +;; +;; Enable captcha validation for registration +;ENABLE_CAPTCHA = false +;; +;; Type of captcha you want to use. Options: image, recaptcha, hcaptcha +;CAPTCHA_TYPE = image +;; +;; Enable recaptcha to use Google's recaptcha service +;; Go to https://www.google.com/recaptcha/admin to sign up for a key +;RECAPTCHA_SECRET = +;RECAPTCHA_SITEKEY = +;; +;; For hCaptcha, create an account at https://accounts.hcaptcha.com/login to get your keys +;HCAPTCHA_SECRET = +;HCAPTCHA_SITEKEY = +;; +;; Change this to use recaptcha.net or other recaptcha service +;RECAPTCHA_URL = https://www.google.com/recaptcha/ +;; +;; Default value for KeepEmailPrivate +;; Each new user will get the value of this setting copied into their profile +;DEFAULT_KEEP_EMAIL_PRIVATE = false +;; +;; Default value for AllowCreateOrganization +;; Every new user will have rights set to create organizations depending on this setting +;DEFAULT_ALLOW_CREATE_ORGANIZATION = true +;; Default value for IsRestricted +;; Every new user will have restricted permissions depending on this setting +;DEFAULT_USER_IS_RESTRICTED = false +;; +;; Either "public", "limited" or "private", default is "public" +;; Limited is for users visible only to signed users +;; Private is for users visible only to members of their organizations +;; Public is for users visible for everyone +;DEFAULT_USER_VISIBILITY = public +;; +;; Set which visibility modes a user can have +;ALLOWED_USER_VISIBILITY_MODES = public,limited,private +;; +;; Either "public", "limited" or "private", default is "public" +;; Limited is for organizations visible only to signed users +;; Private is for organizations visible only to members of the organization +;; Public is for organizations visible to everyone +;DEFAULT_ORG_VISIBILITY = public +;; +;; Default value for DefaultOrgMemberVisible +;; True will make the membership of the users visible when added to the organisation +;DEFAULT_ORG_MEMBER_VISIBLE = false +;; +;; Default value for EnableDependencies +;; Repositories will use dependencies by default depending on this setting +;DEFAULT_ENABLE_DEPENDENCIES = true +;; +;; Dependencies can be added from any repository where the user is granted access or only from the current repository depending on this setting. +;ALLOW_CROSS_REPOSITORY_DEPENDENCIES = true +;; +;; Enable heatmap on users profiles. +;ENABLE_USER_HEATMAP = true +;; +;; Enable Timetracking +;ENABLE_TIMETRACKING = true +;; +;; Default value for EnableTimetracking +;; Repositories will use timetracking by default depending on this setting +;DEFAULT_ENABLE_TIMETRACKING = true +;; +;; Default value for AllowOnlyContributorsToTrackTime +;; Only users with write permissions can track time if this is true +;DEFAULT_ALLOW_ONLY_CONTRIBUTORS_TO_TRACK_TIME = true +;; +;; Value for the domain part of the user's email address in the git log if user +;; has set KeepEmailPrivate to true. The user's email will be replaced with a +;; concatenation of the user name in lower case, "@" and NO_REPLY_ADDRESS. Default +;; value is "noreply." + DOMAIN, where DOMAIN resolves to the value from server.DOMAIN +;; Note: do not use the notation below +;NO_REPLY_ADDRESS = ; noreply. +;; +;; Show Registration button +;SHOW_REGISTRATION_BUTTON = true +;; +;; Show milestones dashboard page - a view of all the user's milestones +;SHOW_MILESTONES_DASHBOARD_PAGE = true +;; +;; Default value for AutoWatchNewRepos +;; When adding a repo to a team or creating a new repo all team members will watch the +;; repo automatically if enabled +;AUTO_WATCH_NEW_REPOS = true +;; +;; Default value for AutoWatchOnChanges +;; Make the user watch a repository When they commit for the first time +;AUTO_WATCH_ON_CHANGES = false +;; +;; Minimum amount of time a user must exist before comments are kept when the user is deleted. +;USER_DELETE_WITH_COMMENTS_MAX_TIME = 0 +;; Valid site url schemes for user profiles +;VALID_SITE_URL_SCHEMES=http,https + + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Other Settings +;; +;; Uncomment the [section.header] if you wish to +;; set the below settings. +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Root path for storing all repository data. It must be an absolute path. By default, it is stored in a sub-directory of `APP_DATA_PATH`. +;ROOT = +;; +;; The script type this server supports. Usually this is `bash`, but some users report that only `sh` is available. +;SCRIPT_TYPE = bash +;; +;; DETECTED_CHARSETS_ORDER tie-break order for detected charsets. +;; If the charsets have equal confidence, tie-breaking will be done by order in this list +;; with charsets earlier in the list chosen in preference to those later. +;; Adding "defaults" will place the unused charsets at that position. +;DETECTED_CHARSETS_ORDER = UTF-8, UTF-16BE, UTF-16LE, UTF-32BE, UTF-32LE, ISO-8859, windows-1252, ISO-8859, windows-1250, ISO-8859, ISO-8859, ISO-8859, windows-1253, ISO-8859, windows-1255, ISO-8859, windows-1251, windows-1256, KOI8-R, ISO-8859, windows-1254, Shift_JIS, GB18030, EUC-JP, EUC-KR, Big5, ISO-2022, ISO-2022, ISO-2022, IBM424_rtl, IBM424_ltr, IBM420_rtl, IBM420_ltr +;; +;; Default ANSI charset to override non-UTF-8 charsets to +;ANSI_CHARSET = +;; +;; Force every new repository to be private +;FORCE_PRIVATE = false +;; +;; Default privacy setting when creating a new repository, allowed values: last, private, public. Default is last which means the last setting used. +;DEFAULT_PRIVATE = last +;; +;; Default private when using push-to-create +;DEFAULT_PUSH_CREATE_PRIVATE = true +;; +;; Global limit of repositories per user, applied at creation time. -1 means no limit +;MAX_CREATION_LIMIT = -1 +;; +;; Mirror sync queue length, increase if mirror syncing starts hanging (DEPRECATED: please use [queue.mirror] LENGTH instead) +;MIRROR_QUEUE_LENGTH = 1000 +;; +;; Patch test queue length, increase if pull request patch testing starts hanging (DEPRECATED: please use [queue.pr_patch_checker] LENGTH instead) +;PULL_REQUEST_QUEUE_LENGTH = 1000 +;; +;; Preferred Licenses to place at the top of the List +;; The name here must match the filename in options/license or custom/options/license +;PREFERRED_LICENSES = Apache License 2.0,MIT License +;; +;; Disable the ability to interact with repositories using the HTTP protocol +;DISABLE_HTTP_GIT = false +;; +;; Value for Access-Control-Allow-Origin header, default is not to present +;; WARNING: This may be harmful to your website if you do not give it a right value. +;ACCESS_CONTROL_ALLOW_ORIGIN = +;; +;; Force ssh:// clone url instead of scp-style uri when default SSH port is used +;USE_COMPAT_SSH_URI = false +;; +;; Close issues as long as a commit on any branch marks it as fixed +;; Comma separated list of globally disabled repo units. Allowed values: repo.issues, repo.ext_issues, repo.pulls, repo.wiki, repo.ext_wiki +;DISABLED_REPO_UNITS = +;; +;; Comma separated list of default repo units. Allowed values: repo.code, repo.releases, repo.issues, repo.pulls, repo.wiki, repo.projects. +;; Note: Code and Releases can currently not be deactivated. If you specify default repo units you should still list them for future compatibility. +;; External wiki and issue tracker can't be enabled by default as it requires additional settings. +;; Disabled repo units will not be added to new repositories regardless if it is in the default list. +;DEFAULT_REPO_UNITS = repo.code,repo.releases,repo.issues,repo.pulls,repo.wiki,repo.projects +;; +;; Prefix archive files by placing them in a directory named after the repository +;PREFIX_ARCHIVE_FILES = true +;; +;; Disable migrating feature. +;DISABLE_MIGRATIONS = false +;; +;; Disable stars feature. +;DISABLE_STARS = false +;; +;; The default branch name of new repositories +;DEFAULT_BRANCH = master +;; +;; Allow adoption of unadopted repositories +;ALLOW_ADOPTION_OF_UNADOPTED_REPOSITORIES = false +;; +;; Allow deletion of unadopted repositories +;ALLOW_DELETION_OF_UNADOPTED_REPOSITORIES = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.editor] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; List of file extensions for which lines should be wrapped in the Monaco editor +;; Separate extensions with a comma. To line wrap files without an extension, just put a comma +;LINE_WRAP_EXTENSIONS = .txt,.md,.markdown,.mdown,.mkd, +;; +;; Valid file modes that have a preview API associated with them, such as api/v1/markdown +;; Separate the values by commas. The preview tab in edit mode won't be displayed if the file extension doesn't match +;PREVIEWABLE_FILE_MODES = markdown + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.local] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Path for local repository copy. Defaults to `tmp/local-repo` +;LOCAL_COPY_PATH = tmp/local-repo + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.upload] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Whether repository file uploads are enabled. Defaults to `true` +;ENABLED = true +;; +;; Path for uploads. Defaults to `data/tmp/uploads` (tmp gets deleted on gitea restart) +;TEMP_PATH = data/tmp/uploads +;; +;; Comma-separated list of allowed file extensions (`.zip`), mime types (`text/plain`) or wildcard type (`image/*`, `audio/*`, `video/*`). Empty value or `*/*` allows all types. +;ALLOWED_TYPES = +;; +;; Max size of each file in megabytes. Defaults to 3MB +;FILE_MAX_SIZE = 3 +;; +;; Max number of files per upload. Defaults to 5 +;MAX_FILES = 5 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.pull-request] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; List of prefixes used in Pull Request title to mark them as Work In Progress +;WORK_IN_PROGRESS_PREFIXES = WIP:,[WIP] +;; +;; List of keywords used in Pull Request comments to automatically close a related issue +;CLOSE_KEYWORDS = close,closes,closed,fix,fixes,fixed,resolve,resolves,resolved +;; +;; List of keywords used in Pull Request comments to automatically reopen a related issue +;REOPEN_KEYWORDS = reopen,reopens,reopened +;; +;; In the default merge message for squash commits include at most this many commits +;DEFAULT_MERGE_MESSAGE_COMMITS_LIMIT = 50 +;; +;; In the default merge message for squash commits limit the size of the commit messages to this +;DEFAULT_MERGE_MESSAGE_SIZE = 5120 +;; +;; In the default merge message for squash commits walk all commits to include all authors in the Co-authored-by otherwise just use those in the limited list +;DEFAULT_MERGE_MESSAGE_ALL_AUTHORS = false +;; +;; In default merge messages limit the number of approvers listed as Reviewed-by: to this many +;DEFAULT_MERGE_MESSAGE_MAX_APPROVERS = 10 +;; +;; In default merge messages only include approvers who are official +;DEFAULT_MERGE_MESSAGE_OFFICIAL_APPROVERS_ONLY = true +;; +;; Add co-authored-by and co-committed-by trailers if committer does not match author +;ADD_CO_COMMITTER_TRAILERS = true + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.issue] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; List of reasons why a Pull Request or Issue can be locked +;LOCK_REASONS = Too heated,Off-topic,Resolved,Spam + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.release] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Comma-separated list of allowed file extensions (`.zip`), mime types (`text/plain`) or wildcard type (`image/*`, `audio/*`, `video/*`). Empty value or `*/*` allows all types. +;ALLOWED_TYPES = +;DEFAULT_PAGING_NUM = 10 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.signing] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; GPG key to use to sign commits, Defaults to the default - that is the value of git config --get user.signingkey +;; run in the context of the RUN_USER +;; Switch to none to stop signing completely +;SIGNING_KEY = default +;; +;; If a SIGNING_KEY ID is provided and is not set to default, use the provided Name and Email address as the signer. +;; These should match a publicized name and email address for the key. (When SIGNING_KEY is default these are set to +;; the results of git config --get user.name and git config --get user.email respectively and can only be overridden +;; by setting the SIGNING_KEY ID to the correct ID.) +;SIGNING_NAME = +;SIGNING_EMAIL = +;; +;; Sets the default trust model for repositories. Options are: collaborator, committer, collaboratorcommitter +;DEFAULT_TRUST_MODEL = collaborator +;; +;; Determines when gitea should sign the initial commit when creating a repository +;; Either: +;; - never +;; - pubkey: only sign if the user has a pubkey +;; - twofa: only sign if the user has logged in with twofa +;; - always +;; options other than none and always can be combined as comma separated list +;INITIAL_COMMIT = always +;; +;; Determines when to sign for CRUD actions +;; - as above +;; - parentsigned: requires that the parent commit is signed. +;CRUD_ACTIONS = pubkey, twofa, parentsigned +;; Determines when to sign Wiki commits +;; - as above +;WIKI = never +;; +;; Determines when to sign on merges +;; - basesigned: require that the parent of commit on the base repo is signed. +;; - commitssigned: require that all the commits in the head branch are signed. +;; - approved: only sign when merging an approved pr to a protected branch +;MERGES = pubkey, twofa, basesigned, commitssigned + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.mimetype_mapping] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Custom MIME type mapping for downloadable files +;.apk=application/vnd.android.package-archive + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[project] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Default templates for project boards +;PROJECT_BOARD_BASIC_KANBAN_TYPE = To Do, In Progress, Done +;PROJECT_BOARD_BUG_TRIAGE_TYPE = Needs Triage, High Priority, Low Priority, Closed + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cors] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; More information about CORS can be found here: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#The_HTTP_response_headers +;; enable cors headers (disabled by default) +;ENABLED = false +;; +;; scheme of allowed requests +;SCHEME = http +;; +;; list of requesting domains that are allowed +;ALLOW_DOMAIN = * +;; +;; allow subdomains of headers listed above to request +;ALLOW_SUBDOMAIN = false +;; +;; list of methods allowed to request +;METHODS = GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS +;; +;; max time to cache response +;MAX_AGE = 10m +;; +;; allow request with credentials +;ALLOW_CREDENTIALS = false +;; +;; set X-FRAME-OPTIONS header +;X_FRAME_OPTIONS = SAMEORIGIN + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Number of repositories that are displayed on one explore page +;EXPLORE_PAGING_NUM = 20 +;; +;; Number of issues that are displayed on one page +;ISSUE_PAGING_NUM = 10 +;; +;; Number of maximum commits displayed in one activity feed +;FEED_MAX_COMMIT_NUM = 5 +;; +;; Number of items that are displayed in home feed +;FEED_PAGING_NUM = 20 +;; +;; Number of maximum commits displayed in commit graph. +;GRAPH_MAX_COMMIT_NUM = 100 +;; +;; Number of line of codes shown for a code comment +;CODE_COMMENT_LINES = 4 +;; +;; Value of `theme-color` meta tag, used by Android >= 5.0 +;; An invalid color like "none" or "disable" will have the default style +;; More info: https://developers.google.com/web/updates/2014/11/Support-for-theme-color-in-Chrome-39-for-Android +;THEME_COLOR_META_TAG = `#6cc644` +;; +;; Max size of files to be displayed (default is 8MiB) +;MAX_DISPLAY_FILE_SIZE = 8388608 +;; +;; Whether the email of the user should be shown in the Explore Users page +;SHOW_USER_EMAIL = true +;; +;; Set the default theme for the Gitea install +;DEFAULT_THEME = auto +;; +;; All available themes. Allow users select personalized themes regardless of the value of `DEFAULT_THEME`. +;THEMES = auto,gitea,arc-green +;; +;; All available reactions users can choose on issues/prs and comments. +;; Values can be emoji alias (:smile:) or a unicode emoji. +;; For custom reactions, add a tightly cropped square image to public/img/emoji/reaction_name.png +;REACTIONS = +1, -1, laugh, hooray, confused, heart, rocket, eyes +;; +;; Additional Emojis not defined in the utf8 standard +;; By default we support gitea (:gitea:), to add more copy them to public/img/emoji/emoji_name.png and add it to this config. +;; Dont mistake it for Reactions. +;CUSTOM_EMOJIS = gitea, codeberg, gitlab, git, github, gogs +;; +;; Whether the full name of the users should be shown where possible. If the full name isn't set, the username will be used. +;DEFAULT_SHOW_FULL_NAME = false +;; +;; Whether to search within description at repository search on explore page. +;SEARCH_REPO_DESCRIPTION = true +;; +;; Whether to enable a Service Worker to cache frontend assets +;USE_SERVICE_WORKER = true + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui.admin] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Number of users that are displayed on one page +;USER_PAGING_NUM = 50 +;; +;; Number of repos that are displayed on one page +;REPO_PAGING_NUM = 50 +;; +;; Number of notices that are displayed on one page +;NOTICE_PAGING_NUM = 25 +;; +;; Number of organizations that are displayed on one page +;ORG_PAGING_NUM = 50 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui.user] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Number of repos that are displayed on one page +;REPO_PAGING_NUM = 15 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui.meta] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;AUTHOR = Gitea - Git with a cup of tea +;DESCRIPTION = Gitea (Git with a cup of tea) is a painless self-hosted Git service written in Go +;KEYWORDS = go,git,self-hosted,gitea + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui.notification] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Control how often the notification endpoint is polled to update the notification +;; The timeout will increase to MAX_TIMEOUT in TIMEOUT_STEPs if the notification count is unchanged +;; Set MIN_TIMEOUT to 0 to turn off +;MIN_TIMEOUT = 10s +;MAX_TIMEOUT = 60s +;TIMEOUT_STEP = 10s +;; +;; This setting determines how often the db is queried to get the latest notification counts. +;; If the browser client supports EventSource and SharedWorker, a SharedWorker will be used in preference to polling notification. Set to -1 to disable the EventSource +;EVENT_SOURCE_UPDATE_TIME = 10s + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui.svg] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Whether to render SVG files as images. If SVG rendering is disabled, SVG files are displayed as text and cannot be embedded in markdown files as images. +;ENABLE_RENDER = true + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui.csv] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Maximum allowed file size in bytes to render CSV files as table. (Set to 0 for no limit). +;MAX_FILE_SIZE = 524288 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[markdown] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Render soft line breaks as hard line breaks, which means a single newline character between +;; paragraphs will cause a line break and adding trailing whitespace to paragraphs is not +;; necessary to force a line break. +;; Render soft line breaks as hard line breaks for comments +;ENABLE_HARD_LINE_BREAK_IN_COMMENTS = true +;; +;; Render soft line breaks as hard line breaks for markdown documents +;ENABLE_HARD_LINE_BREAK_IN_DOCUMENTS = false +;; +;; Comma separated list of custom URL-Schemes that are allowed as links when rendering Markdown +;; for example git,magnet,ftp (more at https://en.wikipedia.org/wiki/List_of_URI_schemes) +;; URLs starting with http and https are always displayed, whatever is put in this entry. +;CUSTOM_URL_SCHEMES = +;; +;; List of file extensions that should be rendered/edited as Markdown +;; Separate the extensions with a comma. To render files without any extension as markdown, just put a comma +;FILE_EXTENSIONS = .md,.markdown,.mdown,.mkd + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ssh.minimum_key_sizes] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Define allowed algorithms and their minimum key length (use -1 to disable a type) +;ED25519 = 256 +;ECDSA = 256 +;RSA = 2048 +;DSA = -1 ; set to 1024 to switch on + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[indexer] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Issue Indexer settings +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Issue indexer type, currently support: bleve, db or elasticsearch, default is bleve +;ISSUE_INDEXER_TYPE = bleve +;; +;; Issue indexer storage path, available when ISSUE_INDEXER_TYPE is bleve +;ISSUE_INDEXER_PATH = indexers/issues.bleve +;; +;; Issue indexer connection string, available when ISSUE_INDEXER_TYPE is elasticsearch +;ISSUE_INDEXER_CONN_STR = http://elastic:changeme@localhost:9200 +;; +;; Issue indexer name, available when ISSUE_INDEXER_TYPE is elasticsearch +;ISSUE_INDEXER_NAME = gitea_issues +;; +;; Timeout the indexer if it takes longer than this to start. +;; Set to zero to disable timeout. +;STARTUP_TIMEOUT = 30s +;; +;; Issue indexer queue, currently support: channel, levelqueue or redis, default is levelqueue (deprecated - use [queue.issue_indexer]) +;ISSUE_INDEXER_QUEUE_TYPE = levelqueue; **DEPRECATED** use settings in `[queue.issue_indexer]`. +;; +;; When ISSUE_INDEXER_QUEUE_TYPE is levelqueue, this will be the path where the queue will be saved. +;; This can be overridden by `ISSUE_INDEXER_QUEUE_CONN_STR`. +;; default is queues/common +;ISSUE_INDEXER_QUEUE_DIR = queues/common; **DEPRECATED** use settings in `[queue.issue_indexer]`. +;; +;; When `ISSUE_INDEXER_QUEUE_TYPE` is `redis`, this will store the redis connection string. +;; When `ISSUE_INDEXER_QUEUE_TYPE` is `levelqueue`, this is a directory or additional options of +;; the form `leveldb://path/to/db?option=value&....`, and overrides `ISSUE_INDEXER_QUEUE_DIR`. +;ISSUE_INDEXER_QUEUE_CONN_STR = "addrs=127.0.0.1:6379 db=0"; **DEPRECATED** use settings in `[queue.issue_indexer]`. +;; +;; Batch queue number, default is 20 +;ISSUE_INDEXER_QUEUE_BATCH_NUMBER = 20; **DEPRECATED** use settings in `[queue.issue_indexer]`. + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Repository Indexer settings +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; repo indexer by default disabled, since it uses a lot of disk space +;REPO_INDEXER_ENABLED = false +;; +;; Code search engine type, could be `bleve` or `elasticsearch`. +;REPO_INDEXER_TYPE = bleve +;; +;; Index file used for code search. available when `REPO_INDEXER_TYPE` is bleve +;REPO_INDEXER_PATH = indexers/repos.bleve +;; +;; Code indexer connection string, available when `REPO_INDEXER_TYPE` is elasticsearch. i.e. http://elastic:changeme@localhost:9200 +;REPO_INDEXER_CONN_STR = +;; +;; Code indexer name, available when `REPO_INDEXER_TYPE` is elasticsearch +;REPO_INDEXER_NAME = gitea_codes +;; +;; A comma separated list of glob patterns (see https://github.com/gobwas/glob) to include +;; in the index; default is empty +;REPO_INDEXER_INCLUDE = +;; +;; A comma separated list of glob patterns to exclude from the index; ; default is empty +;REPO_INDEXER_EXCLUDE = +;; +;; +;UPDATE_BUFFER_LEN = 20; **DEPRECATED** use settings in `[queue.issue_indexer]`. +;MAX_FILE_SIZE = 1048576 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[queue] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Specific queues can be individually configured with [queue.name]. [queue] provides defaults +;; ([queue.issue_indexer] is special due to the old configuration described above) +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; General queue queue type, currently support: persistable-channel, channel, level, redis, dummy +;; default to persistable-channel +;TYPE = persistable-channel +;; +;; data-dir for storing persistable queues and level queues, individual queues will default to `queues/common` meaning the queue is shared. +;DATADIR = queues/ +;; +;; Default queue length before a channel queue will block +;LENGTH = 20 +;; +;; Batch size to send for batched queues +;BATCH_LENGTH = 20 +;; +;; Connection string for redis queues this will store the redis connection string. +;; When `TYPE` is `persistable-channel`, this provides a directory for the underlying leveldb +;; or additional options of the form `leveldb://path/to/db?option=value&....`, and will override `DATADIR`. +;CONN_STR = "addrs=127.0.0.1:6379 db=0" +;; +;; Provides the suffix of the default redis/disk queue name - specific queues can be overridden within in their [queue.name] sections. +;QUEUE_NAME = "_queue" +;; +;; Provides the suffix of the default redis/disk unique queue set name - specific queues can be overridden within in their [queue.name] sections. +;SET_NAME = "_unique" +;; +;; If the queue cannot be created at startup - level queues may need a timeout at startup - wrap the queue: +;WRAP_IF_NECESSARY = true +;; +;; Attempt to create the wrapped queue at max +;MAX_ATTEMPTS = 10 +;; +;; Timeout queue creation +;TIMEOUT = 15m30s +;; +;; Create a pool with this many workers +;WORKERS = 0 +;; +;; Dynamically scale the worker pool to at this many workers +;MAX_WORKERS = 10 +;; +;; Add boost workers when the queue blocks for BLOCK_TIMEOUT +;BLOCK_TIMEOUT = 1s +;; +;; Remove the boost workers after BOOST_TIMEOUT +;BOOST_TIMEOUT = 5m +;; +;; During a boost add BOOST_WORKERS +;BOOST_WORKERS = 1 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[admin] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Disallow regular (non-admin) users from creating organizations. +;DISABLE_REGULAR_ORG_CREATION = false +;; +;; Default configuration for email notifications for users (user configurable). Options: enabled, onmention, disabled +;DEFAULT_EMAIL_NOTIFICATIONS = enabled + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[openid] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; OpenID is an open, standard and decentralized authentication protocol. +;; Your identity is the address of a webpage you provide, which describes +;; how to prove you are in control of that page. +;; +;; For more info: https://en.wikipedia.org/wiki/OpenID +;; +;; Current implementation supports OpenID-2.0 +;; +;; Tested to work providers at the time of writing: +;; - Any GNUSocial node (your.hostname.tld/username) +;; - Any SimpleID provider (http://simpleid.koinic.net) +;; - http://openid.org.cn/ +;; - openid.stackexchange.com +;; - login.launchpad.net +;; - .livejournal.com +;; +;; Whether to allow signin in via OpenID +;ENABLE_OPENID_SIGNIN = true +;; +;; Whether to allow registering via OpenID +;; Do not include to rely on rhw DISABLE_REGISTRATION setting +;;ENABLE_OPENID_SIGNUP = true +;; +;; Allowed URI patterns (POSIX regexp). +;; Space separated. +;; Only these would be allowed if non-blank. +;; Example value: trusted.domain.org trusted.domain.net +;WHITELISTED_URIS = +;; +;; Forbidden URI patterns (POSIX regexp). +;; Space separated. +;; Only used if WHITELISTED_URIS is blank. +;; Example value: loadaverage.org/badguy stackexchange.com/.*spammer +;BLACKLISTED_URIS = + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[oauth2_client] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Whether a new auto registered oauth2 user needs to confirm their email. +;; Do not include to use the REGISTER_EMAIL_CONFIRM setting from the `[service]` section. +;REGISTER_EMAIL_CONFIRM = +;; +;; Scopes for the openid connect oauth2 provider (separated by space, the openid scope is implicitly added). +;; Typical values are profile and email. +;; For more information about the possible values see https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims +;OPENID_CONNECT_SCOPES = +;; +;; Automatically create user accounts for new oauth2 users. +;ENABLE_AUTO_REGISTRATION = false +;; +;; The source of the username for new oauth2 accounts: +;; userid = use the userid / sub attribute +;; nickname = use the nickname attribute +;; email = use the username part of the email attribute +;USERNAME = nickname +;; +;; Update avatar if available from oauth2 provider. +;; Update will be performed on each login. +;UPDATE_AVATAR = false +;; +;; How to handle if an account / email already exists: +;; disabled = show an error +;; login = show an account linking login +;; auto = link directly with the account +;ACCOUNT_LINKING = login + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[webhook] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Hook task queue length, increase if webhook shooting starts hanging +;QUEUE_LENGTH = 1000 +;; +;; Deliver timeout in seconds +;DELIVER_TIMEOUT = 5 +;; +;; Webhook can only call allowed hosts for security reasons. Comma separated list, eg: external, 192.168.1.0/24, *.mydomain.com +;; Built-in: loopback (for localhost), private (for LAN/intranet), external (for public hosts on internet), * (for all hosts) +;; CIDR list: 1.2.3.0/8, 2001:db8::/32 +;; Wildcard hosts: *.mydomain.com, 192.168.100.* +;; Since 1.15.7. Default to * for 1.15.x, external for 1.16 and later +;ALLOWED_HOST_LIST = external +;; +;; Allow insecure certification +;SKIP_TLS_VERIFY = false +;; +;; Number of history information in each page +;PAGING_NUM = 10 +;; +;; Proxy server URL, support http://, https//, socks://, blank will follow environment http_proxy/https_proxy +;PROXY_URL = +;; +;; Comma separated list of host names requiring proxy. Glob patterns (*) are accepted; use ** to match all hosts. +;PROXY_HOSTS = + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[mailer] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;ENABLED = false +;; +;; Buffer length of channel, keep it as it is if you don't know what it is. +;SEND_BUFFER_LEN = 100 +;; +;; Prefix displayed before subject in mail +;SUBJECT_PREFIX = +;; +;; Mail server +;; Gmail: smtp.gmail.com:587 +;; QQ: smtp.qq.com:465 +;; As per RFC 8314 using Implicit TLS/SMTPS on port 465 (if supported) is recommended, +;; otherwise STARTTLS on port 587 should be used. +;HOST = +;; +;; Disable HELO operation when hostnames are different. +;DISABLE_HELO = +;; +;; Custom hostname for HELO operation, if no value is provided, one is retrieved from system. +;HELO_HOSTNAME = +;; +;; Whether or not to skip verification of certificates; `true` to disable verification. This option is unsafe. Consider adding the certificate to the system trust store instead. +;SKIP_VERIFY = false +;; +;; Use client certificate +;USE_CERTIFICATE = false +;CERT_FILE = custom/mailer/cert.pem +;KEY_FILE = custom/mailer/key.pem +;; +;; Should SMTP connect with TLS, (if port ends with 465 TLS will always be used.) +;; If this is false but STARTTLS is supported the connection will be upgraded to TLS opportunistically. +;IS_TLS_ENABLED = false +;; +;; Mail from address, RFC 5322. This can be just an email address, or the `"Name" ` format +;FROM = +;; +;; Sometimes it is helpful to use a different address on the envelope. Set this to use ENVELOPE_FROM as the from on the envelope. Set to `<>` to send an empty address. +;ENVELOPE_FROM = +;; +;; Mailer user name and password +;; Please Note: Authentication is only supported when the SMTP server communication is encrypted with TLS (this can be via STARTTLS) or `HOST=localhost`. +;USER = +;; +;; Use PASSWD = `your password` for quoting if you use special characters in the password. +;PASSWD = +;; +;; Send mails as plain text +;SEND_AS_PLAIN_TEXT = false +;; +;; Set Mailer Type (either SMTP, sendmail or dummy to just send to the log) +;MAILER_TYPE = smtp +;; +;; Specify an alternative sendmail binary +;SENDMAIL_PATH = sendmail +;; +;; Specify any extra sendmail arguments +;SENDMAIL_ARGS = +;; +;; Timeout for Sendmail +;SENDMAIL_TIMEOUT = 5m +;; +;; convert \r\n to \n for Sendmail +;SENDMAIL_CONVERT_CRLF = true + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cache] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; if the cache enabled +;ENABLED = true +;; +;; Either "memory", "redis", "memcache", or "twoqueue". default is "memory" +;ADAPTER = memory +;; +;; For "memory" only, GC interval in seconds, default is 60 +;INTERVAL = 60 +;; +;; For "redis" and "memcache", connection host address +;; redis: network=tcp,addr=:6379,password=macaron,db=0,pool_size=100,idle_timeout=180 +;; memcache: `127.0.0.1:11211` +;; twoqueue: `{"size":50000,"recent_ratio":0.25,"ghost_ratio":0.5}` or `50000` +;HOST = +;; +;; Time to keep items in cache if not used, default is 16 hours. +;; Setting it to 0 disables caching +;ITEM_TTL = 16h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Last commit cache +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cache.last_commit] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; if the cache enabled +;ENABLED = true +;; +;; Time to keep items in cache if not used, default is 8760 hours. +;; Setting it to 0 disables caching +;ITEM_TTL = 8760h +;; +;; Only enable the cache when repository's commits count great than +;COMMITS_COUNT = 1000 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[session] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Either "memory", "file", or "redis", default is "memory" +;PROVIDER = memory +;; +;; Provider config options +;; memory: doesn't have any config yet +;; file: session file path, e.g. `data/sessions` +;; redis: network=tcp,addr=:6379,password=macaron,db=0,pool_size=100,idle_timeout=180 +;; mysql: go-sql-driver/mysql dsn config string, e.g. `root:password@/session_table` +;PROVIDER_CONFIG = data/sessions +;; +;; Session cookie name +;COOKIE_NAME = i_like_gitea +;; +;; If you use session in https only, default is false +;COOKIE_SECURE = false +;; +;; Session GC time interval in seconds, default is 86400 (1 day) +;GC_INTERVAL_TIME = 86400 +;; +;; Session life time in seconds, default is 86400 (1 day) +;SESSION_LIFE_TIME = 86400 +;; +;; SameSite settings. Either "none", "lax", or "strict" +;SAME_SITE=lax + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[picture] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;AVATAR_UPLOAD_PATH = data/avatars +;REPOSITORY_AVATAR_UPLOAD_PATH = data/repo-avatars +;; +;; How Gitea deals with missing repository avatars +;; none = no avatar will be displayed; random = random avatar will be displayed; image = default image will be used +;REPOSITORY_AVATAR_FALLBACK = none +;REPOSITORY_AVATAR_FALLBACK_IMAGE = /img/repo_default.png +;; +;; Max Width and Height of uploaded avatars. +;; This is to limit the amount of RAM used when resizing the image. +;AVATAR_MAX_WIDTH = 4096 +;AVATAR_MAX_HEIGHT = 3072 +;; +;; The multiplication factor for rendered avatar images. +;; Larger values result in finer rendering on HiDPI devices. +;AVATAR_RENDERED_SIZE_FACTOR = 3 +;; +;; Maximum allowed file size for uploaded avatars. +;; This is to limit the amount of RAM used when resizing the image. +;AVATAR_MAX_FILE_SIZE = 1048576 +;; +;; Chinese users can choose "duoshuo" +;; or a custom avatar source, like: http://cn.gravatar.com/avatar/ +;GRAVATAR_SOURCE = gravatar +;; +;; This value will always be true in offline mode. +;DISABLE_GRAVATAR = false +;; +;; Federated avatar lookup uses DNS to discover avatar associated +;; with emails, see https://www.libravatar.org +;; This value will always be false in offline mode or when Gravatar is disabled. +;ENABLE_FEDERATED_AVATAR = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[attachment] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Whether issue and pull request attachments are enabled. Defaults to `true` +;ENABLED = true +;; +;; Comma-separated list of allowed file extensions (`.zip`), mime types (`text/plain`) or wildcard type (`image/*`, `audio/*`, `video/*`). Empty value or `*/*` allows all types. +;ALLOWED_TYPES = .docx,.gif,.gz,.jpeg,.jpg,.mp4,.log,.pdf,.png,.pptx,.txt,.xlsx,.zip +;; +;; Max size of each file. Defaults to 4MB +;MAX_SIZE = 4 +;; +;; Max number of files per upload. Defaults to 5 +;MAX_FILES = 5 +;; +;; Storage type for attachments, `local` for local disk or `minio` for s3 compatible +;; object storage service, default is `local`. +;STORAGE_TYPE = local +;; +;; Allows the storage driver to redirect to authenticated URLs to serve files directly +;; Currently, only `minio` is supported. +;SERVE_DIRECT = false +;; +;; Path for attachments. Defaults to `data/attachments` only available when STORAGE_TYPE is `local` +;PATH = data/attachments +;; +;; Minio endpoint to connect only available when STORAGE_TYPE is `minio` +;MINIO_ENDPOINT = localhost:9000 +;; +;; Minio accessKeyID to connect only available when STORAGE_TYPE is `minio` +;MINIO_ACCESS_KEY_ID = +;; +;; Minio secretAccessKey to connect only available when STORAGE_TYPE is `minio` +;MINIO_SECRET_ACCESS_KEY = +;; +;; Minio bucket to store the attachments only available when STORAGE_TYPE is `minio` +;MINIO_BUCKET = gitea +;; +;; Minio location to create bucket only available when STORAGE_TYPE is `minio` +;MINIO_LOCATION = us-east-1 +;; +;; Minio base path on the bucket only available when STORAGE_TYPE is `minio` +;MINIO_BASE_PATH = attachments/ +;; +;; Minio enabled ssl only available when STORAGE_TYPE is `minio` +;MINIO_USE_SSL = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[time] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Specifies the format for fully outputted dates. Defaults to RFC1123 +;; Special supported values are ANSIC, UnixDate, RubyDate, RFC822, RFC822Z, RFC850, RFC1123, RFC1123Z, RFC3339, RFC3339Nano, Kitchen, Stamp, StampMilli, StampMicro and StampNano +;; For more information about the format see http://golang.org/pkg/time/#pkg-constants +;FORMAT = +;; +;; Location the UI time display i.e. Asia/Shanghai +;; Empty means server's location setting +;DEFAULT_UI_LOCATION = + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Common settings +;; +;; Setting this to true will enable all cron tasks periodically with default settings. +;ENABLED = false +;; Setting this to true will run all enabled cron tasks when Gitea starts. +;RUN_AT_START = false +;; +;; Note: ``SCHEDULE`` accept formats +;; - Full crontab specs, e.g. "* * * * * ?" +;; - Descriptors, e.g. "@midnight", "@every 1h30m" +;; See more: https://pkg.go.dev/github.com/gogs/cron@v0.0.0-20171120032916-9f6c956d3e14 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Basic cron tasks - enabled by default +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Clean up old repository archives +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.archive_cleanup] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Whether to enable the job +;ENABLED = true +;; Whether to always run at least once at start up time (if ENABLED) +;RUN_AT_START = true +;; Notice if not success +;NO_SUCCESS_NOTICE = false +;; Time interval for job to run +;SCHEDULE = @midnight +;; Archives created more than OLDER_THAN ago are subject to deletion +;OLDER_THAN = 24h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Update mirrors +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.update_mirrors] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;SCHEDULE = @every 10m +;; Enable running Update mirrors task periodically. +;ENABLED = true +;; Run Update mirrors task when Gitea starts. +;RUN_AT_START = false +;; Notice if not success +;NO_SUCCESS_NOTICE = true +;; Limit the number of mirrors added to the queue to this number +;; (negative values mean no limit, 0 will result in no result in no mirrors being queued effectively disabling pull mirror updating.) +;PULL_LIMIT=50 +;; Limit the number of mirrors added to the queue to this number +;; (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling push mirror updating) +;PUSH_LIMIT=50 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Repository health check +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.repo_health_check] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;SCHEDULE = @midnight +;; Enable running Repository health check task periodically. +;ENABLED = true +;; Run Repository health check task when Gitea starts. +;RUN_AT_START = false +;; Notice if not success +;NO_SUCCESS_NOTICE = false +;TIMEOUT = 60s +;; Arguments for command 'git fsck', e.g. "--unreachable --tags" +;; see more on http://git-scm.com/docs/git-fsck +;ARGS = + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Check repository statistics +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.check_repo_stats] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Enable running check repository statistics task periodically. +;ENABLED = true +;; Run check repository statistics task when Gitea starts. +;RUN_AT_START = true +;; Notice if not success +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @midnight + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.update_migration_poster_id] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +; Update migrated repositories' issues and comments' posterid, it will always attempt synchronization when the instance starts. +;ENABLED = true +;; Update migrated repositories' issues and comments' posterid when starting server (default true) +;RUN_AT_START = true +;; Notice if not success +;NO_SUCCESS_NOTICE = false +;; Interval as a duration between each synchronization. (default every 24h) +;SCHEDULE = @midnight + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Synchronize external user data (only LDAP user synchronization is supported) +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.sync_external_users] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = true +;; Synchronize external user data when starting server (default false) +;RUN_AT_START = false +;; Notice if not success +;NO_SUCCESS_NOTICE = false +;; Interval as a duration between each synchronization (default every 24h) +;SCHEDULE = @midnight +;; Create new users, update existing user data and disable users that are not in external source anymore (default) +;; or only create new users if UPDATE_EXISTING is set to false +;UPDATE_EXISTING = true + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Clean-up deleted branches +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.deleted_branches_cleanup] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = true +;; Clean-up deleted branches when starting server (default true) +;RUN_AT_START = true +;; Notice if not success +;NO_SUCCESS_NOTICE = false +;; Interval as a duration between each synchronization (default every 24h) +;SCHEDULE = @midnight +;; deleted branches than OLDER_THAN ago are subject to deletion +;OLDER_THAN = 24h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Cleanup hook_task table +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.cleanup_hook_task_table] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Whether to enable the job +;ENABLED = true +;; Whether to always run at start up time (if ENABLED) +;RUN_AT_START = false +;; Time interval for job to run +;SCHEDULE = @midnight +;; OlderThan or PerWebhook. How the records are removed, either by age (i.e. how long ago hook_task record was delivered) or by the number to keep per webhook (i.e. keep most recent x deliveries per webhook). +;CLEANUP_TYPE = OlderThan +;; If CLEANUP_TYPE is set to OlderThan, then any delivered hook_task records older than this expression will be deleted. +;OLDER_THAN = 168h +;; If CLEANUP_TYPE is set to PerWebhook, this is number of hook_task records to keep for a webhook (i.e. keep the most recent x deliveries). +;NUMBER_TO_KEEP = 10 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +; Extended cron task - not enabled by default +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Delete all unactivated accounts +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.delete_inactive_accounts] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @annually +;OLDER_THAN = 168h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Delete all repository archives +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.delete_repo_archives] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @annually; + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Garbage collect all repositories +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.git_gc_repos] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 72h +;TIMEOUT = 60s +;; Arguments for command 'git gc' +;; The default value is same with [git] -> GC_ARGS +;ARGS = + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Update the '.ssh/authorized_keys' file with Gitea SSH keys +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.resync_all_sshkeys] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 72h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Resynchronize pre-receive, update and post-receive hooks of all repositories. +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.resync_all_hooks] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 72h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Reinitialize all missing Git repositories for which records exist +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.reinit_missing_repos] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 72h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Delete all repositories missing their Git files +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.delete_missing_repos] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 72h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Delete generated repository avatars +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.delete_generated_repository_avatars] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 72h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Delete all old actions from database +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.delete_old_actions] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 168h +;OLDER_THAN = 8760h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Check for new Gitea versions +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.update_checker] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;ENABLE_SUCCESS_NOTICE = false +;SCHEDULE = @every 168h +;HTTP_ENDPOINT = https://dl.gitea.io/gitea/version.json + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Git Operation timeout in seconds +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[git.timeout] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;DEFAULT = 360 +;MIGRATE = 600 +;MIRROR = 300 +;CLONE = 300 +;PULL = 300 +;GC = 60 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[mirror] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Enables the mirror functionality. Set to **false** to disable all mirrors. +;ENABLED = true +;; Disable the creation of **new** pull mirrors. Pre-existing mirrors remain valid. Will be ignored if `mirror.ENABLED` is `false`. +;DISABLE_NEW_PULL = false +;; Disable the creation of **new** push mirrors. Pre-existing mirrors remain valid. Will be ignored if `mirror.ENABLED` is `false`. +;DISABLE_NEW_PUSH = false +;; Default interval as a duration between each check +;DEFAULT_INTERVAL = 8h +;; Min interval as a duration must be > 1m +;MIN_INTERVAL = 10m + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[api] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Enables Swagger. True or false; default is true. +;ENABLE_SWAGGER = true +;; Max number of items in a page +;MAX_RESPONSE_ITEMS = 50 +;; Default paging number of api +;DEFAULT_PAGING_NUM = 30 +;; Default and maximum number of items per page for git trees api +;DEFAULT_GIT_TREES_PER_PAGE = 1000 +;; Default size of a blob returned by the blobs API (default is 10MiB) +;DEFAULT_MAX_BLOB_SIZE = 10485760 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[i18n] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;LANGS = en-US,zh-CN,zh-HK,zh-TW,de-DE,fr-FR,nl-NL,lv-LV,ru-RU,uk-UA,ja-JP,es-ES,pt-BR,pt-PT,pl-PL,bg-BG,it-IT,fi-FI,tr-TR,cs-CZ,sr-SP,sv-SE,ko-KR,el-GR,fa-IR,hu-HU,id-ID,ml-IN +;NAMES = English,简体中文,繁體中文（香港）,繁體中文（台灣）,Deutsch,français,Nederlands,latviešu,русский,Українська,日本語,español,português do Brasil,Português de Portugal,polski,български,italiano,suomi,Türkçe,čeština,српски,svenska,한국어,ελληνικά,فارسی,magyar nyelv,bahasa Indonesia,മലയാളം + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[highlight.mapping] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Extension mapping to highlight class +;; e.g. .toml=ini + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[other] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;SHOW_FOOTER_BRANDING = false +;; Show version information about Gitea and Go in the footer +;SHOW_FOOTER_VERSION = true +;; Show template execution time in the footer +;SHOW_FOOTER_TEMPLATE_LOAD_TIME = true + + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[markup] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Set the maximum number of characters in a mermaid source. (Set to -1 to disable limits) +;MERMAID_MAX_SOURCE_CHARACTERS = 5000 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[markup.sanitizer.1] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; The following keys can appear once to define a sanitation policy rule. +;; This section can appear multiple times by adding a unique alphanumeric suffix to define multiple rules. +;; e.g., [markup.sanitizer.1] -> [markup.sanitizer.2] -> [markup.sanitizer.TeX] +;ELEMENT = span +;ALLOW_ATTR = class +;REGEXP = ^(info|warning|error)$ +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Other markup formats e.g. asciidoc +;; +;; uncomment and enable the below section. +;; (You can add other markup formats by copying the section and adjusting +;; the section name suffix "asciidoc" to something else.) +;[markup.asciidoc] +;ENABLED = false +;; List of file extensions that should be rendered by an external command +;FILE_EXTENSIONS = .adoc,.asciidoc +;; External command to render all matching extensions +;RENDER_COMMAND = "asciidoc --out-file=- -" +;; Don't pass the file on STDIN, pass the filename as argument instead. +;IS_INPUT_FILE = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[metrics] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Enables metrics endpoint. True or false; default is false. +;ENABLED = false +;; If you want to add authorization, specify a token here +;TOKEN = +;; Enable issue by label metrics; default is false +;ENABLED_ISSUE_BY_LABEL = false +;; Enable issue by repository metrics; default is false +;ENABLED_ISSUE_BY_REPOSITORY = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[task] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Task queue type, could be `channel` or `redis`. +;QUEUE_TYPE = channel +;; +;; Task queue length, available only when `QUEUE_TYPE` is `channel`. +;QUEUE_LENGTH = 1000 +;; +;; Task queue connection string, available only when `QUEUE_TYPE` is `redis`. +;; If there is a password of redis, use `addrs=127.0.0.1:6379 password=123 db=0`. +;QUEUE_CONN_STR = "addrs=127.0.0.1:6379 db=0" + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[migrations] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Max attempts per http/https request on migrations. +;MAX_ATTEMPTS = 3 +;; +;; Backoff time per http/https request retry (seconds) +;RETRY_BACKOFF = 3 +;; +;; Allowed domains for migrating, default is blank. Blank means everything will be allowed. +;; Multiple domains could be separated by commas. +;ALLOWED_DOMAINS = +;; +;; Blocklist for migrating, default is blank. Multiple domains could be separated by commas. +;; When ALLOWED_DOMAINS is not blank, this option has a higher priority to deny domains. +;BLOCKED_DOMAINS = +;; +;; Allow private addresses defined by RFC 1918, RFC 1122, RFC 4632 and RFC 4291 (false by default) +;ALLOW_LOCALNETWORKS = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[federation] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Enable/Disable federation capabilities +; ENABLED = true + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; default storage for attachments, lfs and avatars +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[storage] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; storage type +;STORAGE_TYPE = local + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; settings for repository archives, will override storage setting +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[storage.repo-archive] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; storage type +;STORAGE_TYPE = local + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; lfs storage will override storage +;; +;[lfs] +;STORAGE_TYPE = local + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; customize storage +;[storage.my_minio] +;STORAGE_TYPE = minio +;; +;; Minio endpoint to connect only available when STORAGE_TYPE is `minio` +;MINIO_ENDPOINT = localhost:9000 +;; +;; Minio accessKeyID to connect only available when STORAGE_TYPE is `minio` +;MINIO_ACCESS_KEY_ID = +;; +;; Minio secretAccessKey to connect only available when STORAGE_TYPE is `minio` +;MINIO_SECRET_ACCESS_KEY = +;; +;; Minio bucket to store the attachments only available when STORAGE_TYPE is `minio` +;MINIO_BUCKET = gitea +;; +;; Minio location to create bucket only available when STORAGE_TYPE is `minio` +;MINIO_LOCATION = us-east-1 +;; +;; Minio enabled ssl only available when STORAGE_TYPE is `minio` +;MINIO_USE_SSL = false + +;[proxy] +;; Enable the proxy, all requests to external via HTTP will be affected +;PROXY_ENABLED = false +;; Proxy server URL, support http://, https//, socks://, blank will follow environment http_proxy/https_proxy/no_proxy +;PROXY_URL = +;; Comma separated list of host names requiring proxy. Glob patterns (*) are accepted; use ** to match all hosts. +;PROXY_HOSTS = diff --git a/jails/config/git/gitea/conf/app.ini.sample b/jails/config/git/gitea/conf/app.ini.sample index e34373a..30e49d5 100644 --- a/jails/config/git/gitea/conf/app.ini.sample +++ b/jails/config/git/gitea/conf/app.ini.sample @@ -11,7 +11,7 @@ # choosing, INTERNAL_TOKEN is a 64-byte random number in BASE64 encoding, # JWT_SECRET is a 32-byte random number in BASE64 encoding. # -# Your can generate the token using for example: +# You can generate the token using for example: # openssl rand -base64 64 # # You can let Gitea add these to the config for you; you need to make diff --git a/jails/config/git/gitea/options/license b/jails/config/git/gitea/options/license index 51296c3..ebec6b1 100644 --- a/jails/config/git/gitea/options/license +++ b/jails/config/git/gitea/options/license @@ -1,6 +1,6 @@ BSD 2-Clause License ("Simplified BSD License" or "FreeBSD License") -Copyright (c) 2018-2022, diyIT.org +Copyright (c) 2018-2019, diyIT.org All rights reserved. Redistribution and use in source and binary forms, with or without diff --git a/jails/config/git/gitea/public/diyit-org-license.txt b/jails/config/git/gitea/public/diyit-org-license.txt index 51296c3..ebec6b1 100644 --- a/jails/config/git/gitea/public/diyit-org-license.txt +++ b/jails/config/git/gitea/public/diyit-org-license.txt @@ -1,6 +1,6 @@ BSD 2-Clause License ("Simplified BSD License" or "FreeBSD License") -Copyright (c) 2018-2022, diyIT.org +Copyright (c) 2018-2019, diyIT.org All rights reserved. Redistribution and use in source and binary forms, with or without diff --git a/jails/config/git/pkg-list-details-old.txt b/jails/config/git/pkg-list-details-old.txt new file mode 100644 index 0000000..21a651e --- /dev/null +++ b/jails/config/git/pkg-list-details-old.txt @@ -0,0 +1,6 @@ +pkgp123____openldap26-client-2.6.3 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____gitea-1.17.3 +pkgp-freebsd-pkg____nano-6.4 diff --git a/jails/config/git/pkg-list-details.txt b/jails/config/git/pkg-list-details.txt index 7ef23ac..3fad522 100644 --- a/jails/config/git/pkg-list-details.txt +++ b/jails/config/git/pkg-list-details.txt @@ -1,6 +1,6 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____gitea-1.16.5_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openldap-sasl-client-2.4.59 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp123____openldap26-client-2.6.3 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____gitea-1.17.3 +pkgp-freebsd-pkg____nano-7.0 diff --git a/jails/config/git/pkg-list-old.txt b/jails/config/git/pkg-list-old.txt new file mode 100644 index 0000000..030a679 --- /dev/null +++ b/jails/config/git/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion gitea nano openldap26-client pkg diff --git a/jails/config/git/pkg-list.txt b/jails/config/git/pkg-list.txt index 24507dc..030a679 100644 --- a/jails/config/git/pkg-list.txt +++ b/jails/config/git/pkg-list.txt @@ -1 +1 @@ -bash bash-completion gitea nano openldap-sasl-client pkg +bash bash-completion gitea nano openldap26-client pkg diff --git a/jails/config/book/pkgp.conf b/jails/config/git/pkgp.conf similarity index 100% rename from jails/config/book/pkgp.conf rename to jails/config/git/pkgp.conf diff --git a/jails/config/hass/hass.sh b/jails/config/hass/hass.sh index 336036b..5d2b8ed 100755 --- a/jails/config/hass/hass.sh +++ b/jails/config/hass/hass.sh @@ -12,4 +12,4 @@ cd /data/homeassistant/ source bin/activate -hass +hass --ignore-os-check diff --git a/jails/config/hass/libffi-3.3_1.pkg b/jails/config/hass/libffi-3.3_1.pkg new file mode 100644 index 0000000..58ac910 Binary files /dev/null and b/jails/config/hass/libffi-3.3_1.pkg differ diff --git a/jails/config/hass/pkg-list-details-old.txt b/jails/config/hass/pkg-list-details-old.txt new file mode 100644 index 0000000..d3e14d6 --- /dev/null +++ b/jails/config/hass/pkg-list-details-old.txt @@ -0,0 +1,16 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____cmake-3.24.3 +pkgp-freebsd-pkg____ffmpeg-4.4.3_1,1 +pkgp-freebsd-pkg____git-lite-2.38.1_3 +pkgp-freebsd-pkg____gmake-4.3_2 +pkgp-freebsd-pkg____heyu2-2.10_1 +pkgp-freebsd-pkg____libxslt-1.1.37 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____openjpeg-2.5.0 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____py39-sqlite3-3.9.15_7 +pkgp-freebsd-pkg____python39-3.9.15_1 +pkgp-freebsd-pkg____rust-1.64.0 +pkgp-freebsd-pkg____tmux-3.3a +pkgp-freebsd-pkg____wget-1.21.3_1 diff --git a/jails/config/hass/pkg-list-details.txt b/jails/config/hass/pkg-list-details.txt index ced381b..654fbb3 100644 --- a/jails/config/hass/pkg-list-details.txt +++ b/jails/config/hass/pkg-list-details.txt @@ -1,17 +1,16 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____cmake-3.22.2 -pkgp-freebsd-pkg____ffmpeg-4.4.1_11,1 -pkgp-freebsd-pkg____git-lite-2.35.1 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____cmake-3.24.3 +pkgp-freebsd-pkg____ffmpeg-4.4.3_1,1 +pkgp-freebsd-pkg____git-lite-2.38.1_4 pkgp-freebsd-pkg____gmake-4.3_2 pkgp-freebsd-pkg____heyu2-2.10_1 -pkgp-freebsd-pkg____libxslt-1.1.35_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openjpeg-2.4.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____py38-sqlite3-3.8.13_7 -pkgp-freebsd-pkg____py39-sqlite3-3.9.12_7 -pkgp-freebsd-pkg____python39-3.9.12 -pkgp-freebsd-pkg____rust-1.59.0 -pkgp-freebsd-pkg____tmux-3.2a -pkgp-freebsd-pkg____wget-1.21.3 +pkgp-freebsd-pkg____libxslt-1.1.37 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____openjpeg-2.5.0 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____py39-sqlite3-3.9.15_7 +pkgp-freebsd-pkg____python39-3.9.15_1 +pkgp-freebsd-pkg____rust-1.65.0 +pkgp-freebsd-pkg____tmux-3.3a +pkgp-freebsd-pkg____wget-1.21.3_1 diff --git a/jails/config/hass/pkg-list-old.txt b/jails/config/hass/pkg-list-old.txt new file mode 100644 index 0000000..38318af --- /dev/null +++ b/jails/config/hass/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion cmake ffmpeg git-lite gmake heyu2 libxslt nano openjpeg pkg py39-sqlite3 python39 rust tmux wget diff --git a/jails/config/hass/pkg-list.txt b/jails/config/hass/pkg-list.txt index c563026..38318af 100644 --- a/jails/config/hass/pkg-list.txt +++ b/jails/config/hass/pkg-list.txt @@ -1 +1 @@ -bash bash-completion cmake ffmpeg git-lite gmake heyu2 libxslt nano openjpeg pkg py38-sqlite3 py39-sqlite3 python39 rust tmux wget +bash bash-completion cmake ffmpeg git-lite gmake heyu2 libxslt nano openjpeg pkg py39-sqlite3 python39 rust tmux wget diff --git a/jails/config/hub/pkg-list-details-old.txt b/jails/config/hub/pkg-list-details-old.txt new file mode 100644 index 0000000..6eeb813 --- /dev/null +++ b/jails/config/hub/pkg-list-details-old.txt @@ -0,0 +1,28 @@ +pkgp123____apache24-2.4.54 +pkgp123____apr-1.7.0.1.6.1_2 +pkgp123____pkg-1.18.4 +pkgp123____samba413-4.13.17_4 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____firefox-esr-102.5.0,1 +pkgp-freebsd-pkg____fluxbox-1.3.7_5 +pkgp-freebsd-pkg____iperf3-3.12 +pkgp-freebsd-pkg____mc-4.8.28 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____p7zip-16.02_3 +pkgp-freebsd-pkg____php81-ldap-8.1.12 +pkgp-freebsd-pkg____php81-mysqli-8.1.12 +pkgp-freebsd-pkg____php81-pgsql-8.1.12 +pkgp-freebsd-pkg____php81-session-8.1.12 +pkgp-freebsd-pkg____rename-1.99.2 +pkgp-freebsd-pkg____rkhunter-1.4.6_1 +pkgp-freebsd-pkg____rsync-3.2.6 +pkgp-freebsd-pkg____sshguard-2.4.2_2,1 +pkgp-freebsd-pkg____sudo-1.9.12p1 +pkgp-freebsd-pkg____tigervnc-server-1.12.0_5 +pkgp-freebsd-pkg____unrar-6.12,6 +pkgp-freebsd-pkg____wget-1.21.3_1 +pkgp-freebsd-pkg____xauth-1.1.1 +pkgp-freebsd-pkg____xorg-fonts-truetype-7.7_1 +pkgp-freebsd-pkg____xorriso-1.5.4 +pkgp-freebsd-pkg____xterm-375 diff --git a/jails/config/hub/pkg-list-details.txt b/jails/config/hub/pkg-list-details.txt index 1cef954..5916c8e 100644 --- a/jails/config/hub/pkg-list-details.txt +++ b/jails/config/hub/pkg-list-details.txt @@ -1,29 +1,28 @@ -pkgp122____openldap24-client-2.4.59_4 -pkgp123____apache24-2.4.53_1 +pkgp123____apache24-2.4.54 pkgp123____apr-1.7.0.1.6.1_2 -pkgp123____php81-ldap-8.1.5 -pkgp123____pkg-1.17.5_1 -pkgp123____samba413-4.13.17_1 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____compat9x-amd64-9.3.903000.20170608 +pkgp123____pkg-1.18.4 +pkgp123____samba413-4.13.17_4 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____firefox-esr-102.5.0_1,1 pkgp-freebsd-pkg____fluxbox-1.3.7_5 -pkgp-freebsd-pkg____iperf3-3.11 +pkgp-freebsd-pkg____iperf3-3.12 pkgp-freebsd-pkg____mc-4.8.28 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openjdk8-8.322.06.1 +pkgp-freebsd-pkg____nano-7.0 pkgp-freebsd-pkg____p7zip-16.02_3 -pkgp-freebsd-pkg____php81-mysqli-8.1.4_2 -pkgp-freebsd-pkg____php81-pgsql-8.1.4_2 -pkgp-freebsd-pkg____php81-session-8.1.4_2 +pkgp-freebsd-pkg____php81-ldap-8.1.13 +pkgp-freebsd-pkg____php81-mysqli-8.1.13 +pkgp-freebsd-pkg____php81-pgsql-8.1.13 +pkgp-freebsd-pkg____php81-session-8.1.13 pkgp-freebsd-pkg____rename-1.99.2 pkgp-freebsd-pkg____rkhunter-1.4.6_1 -pkgp-freebsd-pkg____rsync-3.2.3_1 +pkgp-freebsd-pkg____rsync-3.2.6 pkgp-freebsd-pkg____sshguard-2.4.2_2,1 -pkgp-freebsd-pkg____sudo-1.9.10 -pkgp-freebsd-pkg____tigervnc-1.9.0_4 -pkgp-freebsd-pkg____unrar-6.11,6 -pkgp-freebsd-pkg____wget-1.21.3 -pkgp-freebsd-pkg____xauth-1.1 +pkgp-freebsd-pkg____sudo-1.9.12p1 +pkgp-freebsd-pkg____tigervnc-server-1.12.0_5 +pkgp-freebsd-pkg____unrar-6.12,6 +pkgp-freebsd-pkg____wget-1.21.3_1 +pkgp-freebsd-pkg____xauth-1.1.1 +pkgp-freebsd-pkg____xorg-fonts-truetype-7.7_1 pkgp-freebsd-pkg____xorriso-1.5.4 -pkgp-freebsd-pkg____xterm-372 +pkgp-freebsd-pkg____xterm-377 diff --git a/jails/config/hub/pkg-list-old.txt b/jails/config/hub/pkg-list-old.txt new file mode 100644 index 0000000..abf1555 --- /dev/null +++ b/jails/config/hub/pkg-list-old.txt @@ -0,0 +1 @@ +apache24 apr bash bash-completion firefox-esr fluxbox iperf3 mc nano p7zip php81-ldap php81-mysqli php81-pgsql php81-session pkg rename rkhunter rsync samba413 sshguard sudo tigervnc-server unrar wget xauth xorg-fonts-truetype xorriso xterm diff --git a/jails/config/hub/pkg-list.txt b/jails/config/hub/pkg-list.txt index 42c5454..abf1555 100644 --- a/jails/config/hub/pkg-list.txt +++ b/jails/config/hub/pkg-list.txt @@ -1 +1 @@ -apache24 apr bash bash-completion compat9x-amd64 fluxbox iperf3 mc nano openjdk8 openldap24-client p7zip php81-ldap php81-mysqli php81-pgsql php81-session pkg rename rkhunter rsync samba413 sshguard sudo tigervnc unrar wget xauth xorriso xterm +apache24 apr bash bash-completion firefox-esr fluxbox iperf3 mc nano p7zip php81-ldap php81-mysqli php81-pgsql php81-session pkg rename rkhunter rsync samba413 sshguard sudo tigervnc-server unrar wget xauth xorg-fonts-truetype xorriso xterm diff --git a/jails/config/ibm/pkg-list-details-old.txt b/jails/config/ibm/pkg-list-details-old.txt new file mode 100644 index 0000000..f29eb09 --- /dev/null +++ b/jails/config/ibm/pkg-list-details-old.txt @@ -0,0 +1,9 @@ +pkgp-freebsd-pkg____automake-1.16.5 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____cmake-3.24.3 +pkgp-freebsd-pkg____git-lite-2.38.1_3 +pkgp-freebsd-pkg____hercules-3.13 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____tmux-3.3a diff --git a/jails/config/ibm/pkg-list-details.txt b/jails/config/ibm/pkg-list-details.txt index 4b04ff4..421c010 100644 --- a/jails/config/ibm/pkg-list-details.txt +++ b/jails/config/ibm/pkg-list-details.txt @@ -1,9 +1,9 @@ pkgp-freebsd-pkg____automake-1.16.5 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____cmake-3.22.2 -pkgp-freebsd-pkg____git-lite-2.35.1 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____cmake-3.24.3 +pkgp-freebsd-pkg____git-lite-2.38.1_4 pkgp-freebsd-pkg____hercules-3.13 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____tmux-3.2a +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____tmux-3.3a diff --git a/jails/config/ibm/pkg-list-old.txt b/jails/config/ibm/pkg-list-old.txt new file mode 100644 index 0000000..5d6bd51 --- /dev/null +++ b/jails/config/ibm/pkg-list-old.txt @@ -0,0 +1 @@ +automake bash bash-completion cmake git-lite hercules nano pkg tmux diff --git a/jails/config/jump/pkg-list-details-old.txt b/jails/config/jump/pkg-list-details-old.txt new file mode 100644 index 0000000..8597a53 --- /dev/null +++ b/jails/config/jump/pkg-list-details-old.txt @@ -0,0 +1,10 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____guacamole-client-1.4.0 +pkgp-freebsd-pkg____guacamole-server-1.4.0 +pkgp-freebsd-pkg____libqrencode-4.1.1 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____openldap-sasl-client-2.4.59 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____wireguard-2,1 +pkgp-freebsd-pkg____zip-3.0_1 diff --git a/jails/config/jump/pkg-list-details.txt b/jails/config/jump/pkg-list-details.txt index 072a7e1..770e301 100644 --- a/jails/config/jump/pkg-list-details.txt +++ b/jails/config/jump/pkg-list-details.txt @@ -1,10 +1,10 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 pkgp-freebsd-pkg____guacamole-client-1.4.0 pkgp-freebsd-pkg____guacamole-server-1.4.0 pkgp-freebsd-pkg____libqrencode-4.1.1 -pkgp-freebsd-pkg____nano-6.0 +pkgp-freebsd-pkg____nano-7.0 pkgp-freebsd-pkg____openldap-sasl-client-2.4.59 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____pkg-1.18.4 pkgp-freebsd-pkg____wireguard-2,1 pkgp-freebsd-pkg____zip-3.0_1 diff --git a/jails/config/jump/pkg-list-old.txt b/jails/config/jump/pkg-list-old.txt new file mode 100644 index 0000000..b701cde --- /dev/null +++ b/jails/config/jump/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion guacamole-client guacamole-server libqrencode nano openldap-sasl-client pkg wireguard zip diff --git a/jails/config/ldap-mgr/pkg-list-details-old.txt b/jails/config/ldap-mgr/pkg-list-details-old.txt new file mode 100644 index 0000000..5f3db04 --- /dev/null +++ b/jails/config/ldap-mgr/pkg-list-details-old.txt @@ -0,0 +1,9 @@ +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____ldap-account-manager-8.0.1 +pkgp-freebsd-pkg____mod_php80-8.0.25 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____phpldapadmin-php80-1.2.6.3_1 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____self-service-password-php80-1.5.0 diff --git a/jails/config/ldap-mgr/pkg-list-details.txt b/jails/config/ldap-mgr/pkg-list-details.txt index b187398..bc5c9ef 100644 --- a/jails/config/ldap-mgr/pkg-list-details.txt +++ b/jails/config/ldap-mgr/pkg-list-details.txt @@ -1,9 +1,7 @@ -pkgp-freebsd-pkg____apache24-2.4.53 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____ldap-account-manager-7.9 -pkgp-freebsd-pkg____mod_php80-8.0.17_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____phpldapadmin-php80-1.2.6.3_1 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____self-service-password-php80-1.4_1 +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____ldap-account-manager-8.0.1 +pkgp-freebsd-pkg____mod_php80-8.0.25 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/r-ldap-mgr/pkg-list.txt b/jails/config/ldap-mgr/pkg-list-old.txt similarity index 54% rename from jails/config/r-ldap-mgr/pkg-list.txt rename to jails/config/ldap-mgr/pkg-list-old.txt index 7c00af8..91d77b6 100644 --- a/jails/config/r-ldap-mgr/pkg-list.txt +++ b/jails/config/ldap-mgr/pkg-list-old.txt @@ -1 +1 @@ -apache24 bash bash-completion ldap-account-manager mod_php80 nano phpldapadmin-php80 pkg sudo +apache24 bash bash-completion ldap-account-manager mod_php80 nano phpldapadmin-php80 pkg self-service-password-php80 diff --git a/jails/config/ldap-mgr/pkg-list.txt b/jails/config/ldap-mgr/pkg-list.txt index 91d77b6..5db2805 100644 --- a/jails/config/ldap-mgr/pkg-list.txt +++ b/jails/config/ldap-mgr/pkg-list.txt @@ -1 +1 @@ -apache24 bash bash-completion ldap-account-manager mod_php80 nano phpldapadmin-php80 pkg self-service-password-php80 +apache24 bash bash-completion ldap-account-manager mod_php80 nano pkg diff --git a/jails/config/ldap/pkg-list-details-old.txt b/jails/config/ldap/pkg-list-details-old.txt new file mode 100644 index 0000000..c0eba4b --- /dev/null +++ b/jails/config/ldap/pkg-list-details-old.txt @@ -0,0 +1,6 @@ +pkgp123____openldap26-server-2.6.3_2 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____openssl-1.1.1s,1 diff --git a/jails/config/ldap/pkg-list-details.txt b/jails/config/ldap/pkg-list-details.txt index 67b4c58..6b19117 100644 --- a/jails/config/ldap/pkg-list-details.txt +++ b/jails/config/ldap/pkg-list-details.txt @@ -1,7 +1,6 @@ -pkgp122____openldap24-client-2.4.59_4 -pkgp123____openldap24-server-2.4.59_9 -pkgp123____pkg-1.17.5_1 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openssl-1.1.1n,1 +pkgp123____openldap26-server-2.6.3_2 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____openssl-1.1.1s,1 diff --git a/jails/config/ldap/pkg-list-old.txt b/jails/config/ldap/pkg-list-old.txt new file mode 100644 index 0000000..dbfd3c1 --- /dev/null +++ b/jails/config/ldap/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion nano openldap26-server openssl pkg diff --git a/jails/config/ldap/pkg-list.txt b/jails/config/ldap/pkg-list.txt index 5c0abc8..dbfd3c1 100644 --- a/jails/config/ldap/pkg-list.txt +++ b/jails/config/ldap/pkg-list.txt @@ -1 +1 @@ -bash bash-completion nano openldap24-client openldap24-server openssl pkg +bash bash-completion nano openldap26-server openssl pkg diff --git a/jails/config/mage/pkg-list-details-old.txt b/jails/config/mage/pkg-list-details-old.txt new file mode 100644 index 0000000..30d6b7e --- /dev/null +++ b/jails/config/mage/pkg-list-details-old.txt @@ -0,0 +1,29 @@ +pkgp-freebsd-pkg____automake-1.16.5 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____cmake-3.24.3 +pkgp-freebsd-pkg____dbus-1.14.4,1 +pkgp-freebsd-pkg____fluxbox-1.3.7_5 +pkgp-freebsd-pkg____git-lite-2.38.1_3 +pkgp-freebsd-pkg____libxslt-1.1.37 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____perl5-5.32.1_3 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____py39-IBMQuantumExperience-2.0.4 +pkgp-freebsd-pkg____py39-jupyterlab-3.4.8 +pkgp-freebsd-pkg____py39-matplotlib-3.4.3_5 +pkgp-freebsd-pkg____py39-pandas-1.5.0,1 +pkgp-freebsd-pkg____py39-pep517-0.13.0 +pkgp-freebsd-pkg____py39-pip-22.2.2 +pkgp-freebsd-pkg____py39-scikit-learn-1.1.2_1 +pkgp-freebsd-pkg____py39-seaborn-0.11.2 +pkgp-freebsd-pkg____rubygem-pkg-config-1.4.9 +pkgp-freebsd-pkg____rust-1.64.0 +pkgp-freebsd-pkg____sudo-1.9.12p1 +pkgp-freebsd-pkg____suitesparse-cholmod-3.0.14 +pkgp-freebsd-pkg____suitesparse-umfpack-5.7.9 +pkgp-freebsd-pkg____symengine-0.9.0_5 +pkgp-freebsd-pkg____tigervnc-server-1.12.0_5 +pkgp-freebsd-pkg____xauth-1.1.1 +pkgp-freebsd-pkg____xorg-fonts-truetype-7.7_1 +pkgp-freebsd-pkg____xterm-375 diff --git a/jails/config/mage/pkg-list-details.txt b/jails/config/mage/pkg-list-details.txt index a6c364f..d22b0d8 100644 --- a/jails/config/mage/pkg-list-details.txt +++ b/jails/config/mage/pkg-list-details.txt @@ -1,30 +1,29 @@ pkgp-freebsd-pkg____automake-1.16.5 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____cmake-3.22.2 -pkgp-freebsd-pkg____dbus-1.12.20_5 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____cmake-3.24.3 +pkgp-freebsd-pkg____dbus-1.14.4,1 pkgp-freebsd-pkg____fluxbox-1.3.7_5 -pkgp-freebsd-pkg____git-lite-2.35.1 -pkgp-freebsd-pkg____libxslt-1.1.35_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____perl5-5.32.1_1 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____py38-IBMQuantumExperience-2.0.4 -pkgp-freebsd-pkg____py38-jupyterlab-3.1.19 -pkgp-freebsd-pkg____py38-matplotlib-3.4.3_3 -pkgp-freebsd-pkg____py38-pandas-1.3.5,1 -pkgp-freebsd-pkg____py38-pep517-0.12.0 -pkgp-freebsd-pkg____py38-pip-20.3.4 -pkgp-freebsd-pkg____py38-scikit-learn-1.0.2 -pkgp-freebsd-pkg____py38-seaborn-0.11.0_1 -pkgp-freebsd-pkg____py38-tensorflow-1.15.5_2 -pkgp-freebsd-pkg____rubygem-pkg-config-1.4.7 -pkgp-freebsd-pkg____rust-1.59.0 -pkgp-freebsd-pkg____sudo-1.9.10 +pkgp-freebsd-pkg____git-lite-2.38.1_4 +pkgp-freebsd-pkg____libxslt-1.1.37 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____perl5-5.32.1_3 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____py39-IBMQuantumExperience-2.0.4 +pkgp-freebsd-pkg____py39-jupyterlab-3.4.8 +pkgp-freebsd-pkg____py39-matplotlib-3.4.3_5 +pkgp-freebsd-pkg____py39-pandas-1.5.0,1 +pkgp-freebsd-pkg____py39-pep517-0.13.0 +pkgp-freebsd-pkg____py39-pip-22.2.2 +pkgp-freebsd-pkg____py39-scikit-learn-1.1.3 +pkgp-freebsd-pkg____py39-seaborn-0.11.2 +pkgp-freebsd-pkg____rubygem-pkg-config-1.4.9 +pkgp-freebsd-pkg____rust-1.65.0 +pkgp-freebsd-pkg____sudo-1.9.12p1 pkgp-freebsd-pkg____suitesparse-cholmod-3.0.14 pkgp-freebsd-pkg____suitesparse-umfpack-5.7.9 -pkgp-freebsd-pkg____symengine-0.8.1 -pkgp-freebsd-pkg____tigervnc-server-1.12.0_4 -pkgp-freebsd-pkg____xauth-1.1 +pkgp-freebsd-pkg____symengine-0.9.0_5 +pkgp-freebsd-pkg____tigervnc-server-1.12.0_5 +pkgp-freebsd-pkg____xauth-1.1.1 pkgp-freebsd-pkg____xorg-fonts-truetype-7.7_1 -pkgp-freebsd-pkg____xterm-372 +pkgp-freebsd-pkg____xterm-377 diff --git a/jails/config/mage/pkg-list-old.txt b/jails/config/mage/pkg-list-old.txt new file mode 100644 index 0000000..ebbfd67 --- /dev/null +++ b/jails/config/mage/pkg-list-old.txt @@ -0,0 +1 @@ +automake bash bash-completion cmake dbus fluxbox git-lite libxslt nano perl5 pkg py39-IBMQuantumExperience py39-jupyterlab py39-matplotlib py39-pandas py39-pep517 py39-pip py39-scikit-learn py39-seaborn rubygem-pkg-config rust sudo suitesparse-cholmod suitesparse-umfpack symengine tigervnc-server xauth xorg-fonts-truetype xterm diff --git a/jails/config/mage/pkg-list.txt b/jails/config/mage/pkg-list.txt index 851edaf..ebbfd67 100644 --- a/jails/config/mage/pkg-list.txt +++ b/jails/config/mage/pkg-list.txt @@ -1 +1 @@ -automake bash bash-completion cmake dbus fluxbox git-lite libxslt nano perl5 pkg py38-IBMQuantumExperience py38-jupyterlab py38-matplotlib py38-pandas py38-pep517 py38-pip py38-scikit-learn py38-seaborn py38-tensorflow rubygem-pkg-config rust sudo suitesparse-cholmod suitesparse-umfpack symengine tigervnc-server xauth xorg-fonts-truetype xterm +automake bash bash-completion cmake dbus fluxbox git-lite libxslt nano perl5 pkg py39-IBMQuantumExperience py39-jupyterlab py39-matplotlib py39-pandas py39-pep517 py39-pip py39-scikit-learn py39-seaborn rubygem-pkg-config rust sudo suitesparse-cholmod suitesparse-umfpack symengine tigervnc-server xauth xorg-fonts-truetype xterm diff --git a/jails/config/mail/pkg-list-details-old.txt b/jails/config/mail/pkg-list-details-old.txt new file mode 100644 index 0000000..84c241b --- /dev/null +++ b/jails/config/mail/pkg-list-details-old.txt @@ -0,0 +1,14 @@ +pkgp123____dcc-dccd-2.3.168 +pkgp123____dovecot-2.3.19.1_1 +pkgp123____dovecot-pigeonhole-0.5.19 +pkgp123____icu-72.1,1 +pkgp123____libunwind-20211201_1 +pkgp123____libyaml-0.2.5 +pkgp123____pkg-1.18.4 +pkgp123____postfix-3.7.3_1,1 +pkgp123____rspamd-3.4_1 +pkgp-freebsd-pkg____apache-solr-8.11.2,1 +pkgp-freebsd-pkg____bash-5.2.2_1 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____redis-7.0.5 diff --git a/jails/config/mail/pkg-list-details.txt b/jails/config/mail/pkg-list-details.txt index ccd66f0..56a3771 100644 --- a/jails/config/mail/pkg-list-details.txt +++ b/jails/config/mail/pkg-list-details.txt @@ -1,12 +1,14 @@ -pkgp122____openldap24-client-2.4.59_4 pkgp123____dcc-dccd-2.3.168 -pkgp123____dovecot-2.3.18_1 -pkgp123____dovecot-pigeonhole-0.5.18 -pkgp123____pkg-1.17.5_1 -pkgp123____postfix-3.7.0_2,1 -pkgp123____rspamd-3.2_1 -pkgp-freebsd-pkg____apache-solr-8.11.1 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____redis-6.2.6 +pkgp123____dovecot-2.3.19.1_1 +pkgp123____dovecot-pigeonhole-0.5.19 +pkgp123____icu-72.1,1 +pkgp123____libunwind-20211201_1 +pkgp123____libyaml-0.2.5 +pkgp123____pkg-1.18.4 +pkgp123____postfix-3.7.3_1,1 +pkgp123____rspamd-3.4_1 +pkgp-freebsd-pkg____apache-solr-8.11.2,1 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____redis-7.0.5 diff --git a/jails/config/mail/pkg-list-old.txt b/jails/config/mail/pkg-list-old.txt new file mode 100644 index 0000000..8bfdd9d --- /dev/null +++ b/jails/config/mail/pkg-list-old.txt @@ -0,0 +1 @@ +apache-solr bash bash-completion dcc-dccd dovecot dovecot-pigeonhole icu libunwind libyaml nano pkg postfix redis rspamd diff --git a/jails/config/mail/pkg-list.txt b/jails/config/mail/pkg-list.txt index 511eaf2..8bfdd9d 100644 --- a/jails/config/mail/pkg-list.txt +++ b/jails/config/mail/pkg-list.txt @@ -1 +1 @@ -apache-solr bash bash-completion dcc-dccd dovecot dovecot-pigeonhole nano openldap24-client pkg postfix redis rspamd +apache-solr bash bash-completion dcc-dccd dovecot dovecot-pigeonhole icu libunwind libyaml nano pkg postfix redis rspamd diff --git a/jails/config/mail/postfix/main.cf b/jails/config/mail/postfix/main.cf index d0eda8c..194df47 100644 --- a/jails/config/mail/postfix/main.cf +++ b/jails/config/mail/postfix/main.cf @@ -282,10 +282,9 @@ unknown_local_recipient_reject_code = 550 #mynetworks = $config_directory/mynetworks #mynetworks = hash:$config_directory/network_table -#mynetworks = 127.0.0.1/32 192.168.0.0/16 [::1]/128 [fe80::]/10 [2603:3024:3f6::]/56 -mynetworks = 127.0.0.1/32 192.168.0.0/24 [::1]/128 [fe80::]/10 [2603:3024:3f6:e1::]/64 +mynetworks = 127.0.0.1/32 192.168.0.0/24 [::1]/128 [fe80::]/10 [fd01::]/64 smtp_bind_address = 192.168.0.100 -smtp_bind_address6 = 2603:3024:3f6:e1::100 +smtp_bind_address6 = fd01::100 # The relay_domains parameter restricts what destinations this system will # relay mail to. See the smtpd_recipient_restrictions description in @@ -675,7 +674,7 @@ manpage_directory = /usr/local/man # sample_directory: The location of the Postfix sample configuration files. # This parameter is obsolete as of Postfix 2.1. # -sample_directory = /usr/local/etc/postfix +#sample_directory = /usr/local/etc/postfix # readme_directory: The location of the Postfix README files. # @@ -684,6 +683,7 @@ inet_protocols = ipv4, ipv6 # sometimes comcast's IPv6 reverse DNS lookup stops working so you need to enable the line below (default: any) #smtp_address_preference = ipv4 +smtp_address_preference = any meta_directory = /usr/local/libexec/postfix shlib_directory = /usr/local/lib/postfix @@ -717,6 +717,8 @@ swap_bangpath = no smtpd_tls_cert_file = /mnt/certs/fullchain.pem smtpd_tls_key_file = /mnt/certs/privkeyr.pem +smtpd_tls_loglevel = 2 + # These two lines define how postfix will connect to other mail servers. # DANE is a stronger form of opportunistic TLS. You can read about it here: # http://www.postfix.org/TLS_README.html#client_tls_dane @@ -729,25 +731,34 @@ smtp_dns_support_level = dnssec # Here we define the options for "mandatory" TLS. In our setup, TLS is only # "mandatory" for authenticating users. I got these settings from Mozilla's # SSL reccomentations page. + +# https://ssl-config.mozilla.org/#server=postfix&version=3.4.8&config=intermediate&openssl=1.1.1k&guideline=5.6 + # # NOTE: do not attempt to make TLS mandatory for all incoming/outgoing # connections. Do not attempt to change the default cipherlist for non- # mandatory connections either. There are still a lot of mail servers out # there that do not use TLS, and many that do only support old ciphers. # Forcing TLS for everyone *will* cause you to lose mail. -smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1, TLSv1.2 -smtpd_tls_mandatory_ciphers = high -tls_high_cipherlist = ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256 +smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1 +smtpd_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1 + +smtpd_tls_mandatory_ciphers = medium +tls_medium_cipherlist = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 + +tls_preempt_cipherlist = no # allow other mail servers to connect using TLS, but don't require it smtpd_tls_security_level = may # tickets and compression have known vulnerabilities -tls_ssl_options = no_ticket, no_compression +tls_ssl_options = no_ticket, no_compression, NO_RENEGOTIATION -# it's more secure to generate your own DH params -smtpd_tls_dh512_param_file = /mnt/certs/dhparam512.pem -smtpd_tls_dh1024_param_file = /mnt/certs/dhparam2048.pem +# it's more secure to generate your own DH params but using mozilla's +# curl https://ssl-config.mozilla.org/ffdhe2048.txt > /path/to/dhparam +# not actually 1024 bits, this applies to all DHE >= 1024 bits +#smtpd_tls_dh512_param_file = /mnt/certs/dhparam512.pem +smtpd_tls_dh1024_param_file = /mnt/certs/dhparam4096.pem # cache incoming and outgoing TLS sessions smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_tlscache @@ -781,13 +792,13 @@ smtpd_helo_required = yes # entry and present a valid, FQDN HELO hostname. In addition, they can only # send mail to valid mailboxes on the server, and the sender's domain must # actually exist. -smtpd_client_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_pipelining,reject_unknown_reverse_client_hostname +smtpd_client_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_pipelining,reject_unknown_reverse_client_hostname,reject_unknown_client_hostname # you might want to consider: # reject_unknown_client_hostname, # here. This will reject all incoming connections without a reverse DNS # entry that resolves back to the client's IP address. This is a very # restrictive check and may reject legitimate mail. -smtpd_helo_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_invalid_helo_hostname,reject_unauth_pipelining,reject_non_fqdn_helo_hostname +smtpd_helo_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_invalid_helo_hostname,reject_unauth_pipelining,reject_non_fqdn_helo_hostname,reject_unknown_helo_hostname # you might want to consider: # reject_unknown_helo_hostname, # here. This will reject all incoming mail without a HELO hostname that @@ -819,3 +830,5 @@ milter_protocol = 6 milter_default_action = accept smtpd_milters = unix:/var/run/rspamd/milter.sock milter_mail_macros = i {mail_addr} {client_addr} {client_name} {auth_authen} + +#always_bcc = ahlawat@ahlawat.com diff --git a/jails/config/maps/pkg-list-details-old.txt b/jails/config/maps/pkg-list-details-old.txt new file mode 100644 index 0000000..1eae6a7 --- /dev/null +++ b/jails/config/maps/pkg-list-details-old.txt @@ -0,0 +1,7 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____npm-8.19.2 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____pkgconf-1.8.0_1,1 +pkgp-freebsd-pkg____vips-8.13.0_3 diff --git a/jails/config/maps/pkg-list-details.txt b/jails/config/maps/pkg-list-details.txt index e4be81b..efe67b8 100644 --- a/jails/config/maps/pkg-list-details.txt +++ b/jails/config/maps/pkg-list-details.txt @@ -1,7 +1,7 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____npm-8.5.2 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____pkgconf-1.8.0,1 -pkgp-freebsd-pkg____vips-8.12.2_4 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____npm-8.19.2 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____pkgconf-1.8.0_1,1 +pkgp-freebsd-pkg____vips-8.13.0_3 diff --git a/jails/config/maps/pkg-list-old.txt b/jails/config/maps/pkg-list-old.txt new file mode 100644 index 0000000..d7a8b86 --- /dev/null +++ b/jails/config/maps/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion nano npm pkg pkgconf vips diff --git a/jails/config/matrix/nginx b/jails/config/matrix/nginx new file mode 100755 index 0000000..0bb988c --- /dev/null +++ b/jails/config/matrix/nginx @@ -0,0 +1,158 @@ +#!/bin/sh + +# PROVIDE: nginx +# REQUIRE: LOGIN cleanvar +# KEYWORD: shutdown + +# +# Add the following lines to /etc/rc.conf to enable nginx: +# nginx_enable (bool): Set to "NO" by default. +# Set it to "YES" to enable nginx +# nginx_profiles (str): Set to "" by default. +# Define your profiles here. +# nginx_pid_prefix (str): Set to "" by default. +# When using profiles manually assign value to "nginx_" +# for prevent collision with other PIDs names. +# nginxlimits_enable (bool): Set to "NO" by default. +# Set it to yes to run `limits $limits_args` +# just before nginx starts. +# nginx_reload_quiet (bool): Set to "NO" by default. +# Set it to yes to suppress info output when testng config. +# nginx_flags (str): Set to "" by default. +# Extra flags passed to start command. +# nginxlimits_args (str): Default to "-e -U www" +# Arguments of pre-start limits run. +# nginx_http_accept_enable (bool): Set to "NO" by default. +# Set to yes to check for accf_http kernel module +# on start-up and load if not loaded. +# nginx_sig_stop (str): Default to "TERM" + +. /etc/rc.subr + +name="nginx" +rcvar=nginx_enable + +start_precmd="nginx_prestart" +stop_precmd="nginx_prestop" +restart_precmd="nginx_checkconfig" +reload_precmd="nginx_checkconfig" +configtest_cmd="nginx_checkconfig" +gracefulstop_cmd="nginx_gracefulstop" +upgrade_precmd="nginx_checkconfig" +upgrade_cmd="nginx_upgrade" +command="/usr/local/sbin/nginx" +_pidprefix="/var/run" +pidfile="${_pidprefix}/${name}.pid" +_tmpprefix="/var/tmp/nginx" +required_files=/usr/local/etc/nginx/nginx.conf +extra_commands="reload configtest upgrade gracefulstop" + +[ -z "$nginx_enable" ] && nginx_enable="NO" +[ -z "$nginxlimits_enable" ] && nginxlimits_enable="NO" +[ -z "$nginxlimits_args" ] && nginxlimits_args="-e -U www" +[ -z "$nginx_http_accept_enable" ] && nginx_http_accept_enable="NO" +[ -z "$nginx_reload_quiet" ] && nginx_reload_quiet="NO" + +load_rc_config $name + +if [ -n "$2" ]; then + profile="$2" + if [ "x${nginx_profiles}" != "x" ]; then + pidfile="${_pidprefix}/${nginx_pid_prefix}${profile}.pid" + eval nginx_configfile="\${nginx_${profile}_configfile:-}" + if [ "x${nginx_configfile}" = "x" ]; then + echo "You must define a configuration file (nginx_${profile}_configfile)" + exit 1 + fi + required_files="${nginx_configfile}" + eval nginx_enable="\${nginx_${profile}_enable:-${nginx_enable}}" + eval nginx_flags="\${nginx_${profile}_flags:-${nginx_flags}}" + eval nginxlimits_enable="\${nginxlimits_${profile}_enable:-${nginxlimits_enable}}" + eval nginxlimits_args="\${nginxlimits_${profile}_args:-${nginxlimits_args}}" + nginx_flags="-c ${nginx_configfile} -g \"pid ${pidfile};\" ${nginx_flags}" + else + echo "$0: extra argument ignored" + fi +else + if [ "x${nginx_profiles}" != "x" -a "x$1" != "x" ]; then + for profile in ${nginx_profiles}; do + echo "===> nginx profile: ${profile}" + /usr/local/etc/rc.d/nginx $1 ${profile} + retcode="$?" + if [ "0${retcode}" -ne 0 ]; then + failed="${profile} (${retcode}) ${failed:-}" + else + success="${profile} ${success:-}" + fi + done + exit 0 + fi +fi + +# tmpfs(5) +nginx_checktmpdir() +{ + if [ ! -d ${_tmpprefix} ] ; then + install -d -o www -g www -m 755 ${_tmpprefix} + fi +} + +nginx_checkconfig() +{ + nginx_checktmpdir + + if checkyesno nginx_reload_quiet; then + eval ${command} ${nginx_flags} -t -q + else + echo "Performing sanity check on nginx configuration:" + eval ${command} ${nginx_flags} -t + fi +} + +nginx_gracefulstop() +{ + echo "Performing a graceful stop:" + sig_stop="QUIT" + run_rc_command ${rc_prefix}stop $rc_extra_args || return 1 +} + +nginx_upgrade() +{ + echo "Upgrading nginx binary:" + + reload_precmd="" + sig_reload="USR2" + run_rc_command ${rc_prefix}reload $rc_extra_args || return 1 + + sleep 1 + + echo "Stopping old binary:" + + sig_reload="QUIT" + pidfile="$pidfile.oldbin" + run_rc_command ${rc_prefix}reload $rc_extra_args || return 1 +} + +nginx_prestart() +{ + if checkyesno nginx_http_accept_enable + then + required_modules="$required_modules accf_http accf_data" + fi + + nginx_checkconfig + + if checkyesno nginxlimits_enable + then + eval `/usr/bin/limits ${nginxlimits_args}` 2>/dev/null + else + return 0 + fi +} + +nginx_prestop() +{ + sig_stop="${nginx_sig_stop:-TERM}" +} + +run_rc_command "$1" diff --git a/jails/config/matrix/pkg-list-details-old.txt b/jails/config/matrix/pkg-list-details-old.txt new file mode 100644 index 0000000..d8ac1bf --- /dev/null +++ b/jails/config/matrix/pkg-list-details-old.txt @@ -0,0 +1,9 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____element-web-1.11.14 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____nginx-1.22.1_2,3 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____py39-matrix-synapse-1.71.0 +pkgp-freebsd-pkg____py39-matrix-synapse-ldap3-0.2.2 +pkgp-freebsd-pkg____py39-psycopg2-2.9.4 diff --git a/jails/config/matrix/pkg-list-details.txt b/jails/config/matrix/pkg-list-details.txt index a3204dc..2b33a7c 100644 --- a/jails/config/matrix/pkg-list-details.txt +++ b/jails/config/matrix/pkg-list-details.txt @@ -1,9 +1,9 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____element-web-1.10.8 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____nginx-1.20.2_9,2 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____py38-matrix-synapse-1.55.2 -pkgp-freebsd-pkg____py38-matrix-synapse-ldap3-0.2.0 -pkgp-freebsd-pkg____py38-psycopg2-2.9.3 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____element-web-1.11.15 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____nginx-1.22.1_2,3 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____py39-matrix-synapse-1.71.0_1 +pkgp-freebsd-pkg____py39-matrix-synapse-ldap3-0.2.2 +pkgp-freebsd-pkg____py39-psycopg2-2.9.4 diff --git a/jails/config/matrix/pkg-list-old.txt b/jails/config/matrix/pkg-list-old.txt new file mode 100644 index 0000000..16a2720 --- /dev/null +++ b/jails/config/matrix/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion element-web nano nginx pkg py39-matrix-synapse py39-matrix-synapse-ldap3 py39-psycopg2 diff --git a/jails/config/matrix/pkg-list.txt b/jails/config/matrix/pkg-list.txt index 11d856e..16a2720 100644 --- a/jails/config/matrix/pkg-list.txt +++ b/jails/config/matrix/pkg-list.txt @@ -1 +1 @@ -bash bash-completion element-web nano nginx pkg py38-matrix-synapse py38-matrix-synapse-ldap3 py38-psycopg2 +bash bash-completion element-web nano nginx pkg py39-matrix-synapse py39-matrix-synapse-ldap3 py39-psycopg2 diff --git a/jails/config/matrix/synapse b/jails/config/matrix/synapse new file mode 100755 index 0000000..bb88f5b --- /dev/null +++ b/jails/config/matrix/synapse @@ -0,0 +1,48 @@ +#!/bin/sh +# +# Created by: Mark Felder + +# PROVIDE: synapse +# REQUIRE: LOGIN postgresql +# KEYWORD: shutdown + +# +# Add the following line to /etc/rc.conf to enable `synapse': +# +# synapse_enable="YES" + +. /etc/rc.subr +name=synapse + +rcvar=synapse_enable +load_rc_config ${name} + +: ${synapse_enable:=NO} +: ${synapse_user:=synapse} +: ${synapse_conf:=/usr/local/etc/matrix-synapse/homeserver.yaml} +: ${synapse_dbdir:=/var/db/matrix-synapse} +: ${synapse_logdir:=/var/log/matrix-synapse} +: ${synapse_pidfile:=/var/run/matrix-synapse/homeserver.pid} + +pidfile="${synapse_pidfile}" +procname=/usr/local/bin/python3.9 +command=/usr/local/bin/python3.9 +command_args="-m synapse.app.homeserver --daemonize -c ${synapse_conf}" +start_precmd=start_precmd + +start_precmd() +{ + if [ ! -d ${synapse_pidfile%/*} ] ; then + install -d -o ${synapse_user} -g wheel ${synapse_pidfile%/*}; + fi + + if [ ! -d ${synapse_dbdir} ] ; then + install -d -o ${synapse_user} -g wheel ${synapse_dbdir}; + fi + + if [ ! -d ${synapse_logdir} ] ; then + install -d -o ${synapse_user} -g wheel ${synapse_logdir}; + fi +} + +run_rc_command "$1" diff --git a/jails/config/meet/pkg-list-details-old.txt b/jails/config/meet/pkg-list-details-old.txt new file mode 100644 index 0000000..6a80c55 --- /dev/null +++ b/jails/config/meet/pkg-list-details-old.txt @@ -0,0 +1,9 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____jicofo-1.0.877 +pkgp-freebsd-pkg____jitsi-meet-1.0.6155 +pkgp-freebsd-pkg____jitsi-videobridge-2.1.681 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____nginx-1.22.1_2,3 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____prosody-0.12.1_2 diff --git a/jails/config/meet/pkg-list-details.txt b/jails/config/meet/pkg-list-details.txt index 4018bdc..4709318 100644 --- a/jails/config/meet/pkg-list-details.txt +++ b/jails/config/meet/pkg-list-details.txt @@ -1,9 +1,9 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____jicofo-1.0.555_2 -pkgp-freebsd-pkg____jitsi-meet-1.0.4048_2 -pkgp-freebsd-pkg____jitsi-videobridge-2.1.183_3 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____nginx-1.20.2_9,2 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____prosody-0.12.0 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____jicofo-1.0.877 +pkgp-freebsd-pkg____jitsi-meet-1.0.6155 +pkgp-freebsd-pkg____jitsi-videobridge-2.1.681 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____nginx-1.22.1_2,3 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____prosody-0.12.1_2 diff --git a/jails/config/meet/pkg-list-old.txt b/jails/config/meet/pkg-list-old.txt new file mode 100644 index 0000000..c54bd3d --- /dev/null +++ b/jails/config/meet/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion jicofo jitsi-meet jitsi-videobridge nano nginx pkg prosody diff --git a/jails/config/monitor/pkg-list-details-old.txt b/jails/config/monitor/pkg-list-details-old.txt new file mode 100644 index 0000000..4d1c493 --- /dev/null +++ b/jails/config/monitor/pkg-list-details-old.txt @@ -0,0 +1,41 @@ +pkgp-freebsd-pkg____alertmanager-0.23.0_7 +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____grafana9-9.2.4 +pkgp-freebsd-pkg____influxdb-1.8.10_7 +pkgp-freebsd-pkg____iperf3-3.12 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____php81-8.1.12 +pkgp-freebsd-pkg____php81-bcmath-8.1.12 +pkgp-freebsd-pkg____php81-bz2-8.1.12 +pkgp-freebsd-pkg____php81-ctype-8.1.12 +pkgp-freebsd-pkg____php81-curl-8.1.12 +pkgp-freebsd-pkg____php81-dom-8.1.12 +pkgp-freebsd-pkg____php81-fileinfo-8.1.12 +pkgp-freebsd-pkg____php81-filter-8.1.12 +pkgp-freebsd-pkg____php81-gd-8.1.12 +pkgp-freebsd-pkg____php81-iconv-8.1.12 +pkgp-freebsd-pkg____php81-intl-8.1.12_1 +pkgp-freebsd-pkg____php81-mbstring-8.1.12 +pkgp-freebsd-pkg____php81-mysqli-8.1.12 +pkgp-freebsd-pkg____php81-opcache-8.1.12 +pkgp-freebsd-pkg____php81-pdo-8.1.12 +pkgp-freebsd-pkg____php81-pdo_mysql-8.1.12 +pkgp-freebsd-pkg____php81-pecl-mcrypt-1.0.5 +pkgp-freebsd-pkg____php81-pecl-memcache-8.0 +pkgp-freebsd-pkg____php81-posix-8.1.12 +pkgp-freebsd-pkg____php81-readline-8.1.12 +pkgp-freebsd-pkg____php81-session-8.1.12 +pkgp-freebsd-pkg____php81-simplexml-8.1.12 +pkgp-freebsd-pkg____php81-soap-8.1.12 +pkgp-freebsd-pkg____php81-sockets-8.1.12 +pkgp-freebsd-pkg____php81-sqlite3-8.1.12 +pkgp-freebsd-pkg____php81-tidy-8.1.12 +pkgp-freebsd-pkg____php81-tokenizer-8.1.12 +pkgp-freebsd-pkg____php81-xml-8.1.12 +pkgp-freebsd-pkg____php81-zip-8.1.12 +pkgp-freebsd-pkg____php81-zlib-8.1.12 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____prometheus-2.39.1 +pkgp-freebsd-pkg____telegraf-1.24.3 diff --git a/jails/config/monitor/pkg-list-details.txt b/jails/config/monitor/pkg-list-details.txt index d071cef..df8bc20 100644 --- a/jails/config/monitor/pkg-list-details.txt +++ b/jails/config/monitor/pkg-list-details.txt @@ -1,41 +1,41 @@ -pkgp-freebsd-pkg____alertmanager-0.23.0_2 -pkgp-freebsd-pkg____apache24-2.4.53 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____grafana8-8.3.6_1 -pkgp-freebsd-pkg____influxdb-1.8.10_2 -pkgp-freebsd-pkg____iperf3-3.11 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____php81-8.1.4_2 -pkgp-freebsd-pkg____php81-bcmath-8.1.4_2 -pkgp-freebsd-pkg____php81-bz2-8.1.4_2 -pkgp-freebsd-pkg____php81-ctype-8.1.4_2 -pkgp-freebsd-pkg____php81-curl-8.1.4_2 -pkgp-freebsd-pkg____php81-dom-8.1.4_1 -pkgp-freebsd-pkg____php81-fileinfo-8.1.4_2 -pkgp-freebsd-pkg____php81-filter-8.1.4_2 -pkgp-freebsd-pkg____php81-gd-8.1.4_2 -pkgp-freebsd-pkg____php81-iconv-8.1.4_2 -pkgp-freebsd-pkg____php81-intl-8.1.4_2 -pkgp-freebsd-pkg____php81-mbstring-8.1.4_2 -pkgp-freebsd-pkg____php81-mysqli-8.1.4_2 -pkgp-freebsd-pkg____php81-opcache-8.1.4_2 -pkgp-freebsd-pkg____php81-pdo-8.1.4_2 -pkgp-freebsd-pkg____php81-pdo_mysql-8.1.4_2 -pkgp-freebsd-pkg____php81-pecl-mcrypt-1.0.4 +pkgp-freebsd-pkg____alertmanager-0.23.0_7 +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____grafana9-9.2.4 +pkgp-freebsd-pkg____influxdb-1.8.10_7 +pkgp-freebsd-pkg____iperf3-3.12 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____php81-8.1.13 +pkgp-freebsd-pkg____php81-bcmath-8.1.13 +pkgp-freebsd-pkg____php81-bz2-8.1.13 +pkgp-freebsd-pkg____php81-ctype-8.1.13 +pkgp-freebsd-pkg____php81-curl-8.1.13 +pkgp-freebsd-pkg____php81-dom-8.1.13 +pkgp-freebsd-pkg____php81-fileinfo-8.1.13 +pkgp-freebsd-pkg____php81-filter-8.1.13 +pkgp-freebsd-pkg____php81-gd-8.1.13 +pkgp-freebsd-pkg____php81-iconv-8.1.13 +pkgp-freebsd-pkg____php81-intl-8.1.13 +pkgp-freebsd-pkg____php81-mbstring-8.1.13 +pkgp-freebsd-pkg____php81-mysqli-8.1.13 +pkgp-freebsd-pkg____php81-opcache-8.1.13 +pkgp-freebsd-pkg____php81-pdo-8.1.13 +pkgp-freebsd-pkg____php81-pdo_mysql-8.1.13 +pkgp-freebsd-pkg____php81-pecl-mcrypt-1.0.5 pkgp-freebsd-pkg____php81-pecl-memcache-8.0 -pkgp-freebsd-pkg____php81-posix-8.1.4_2 -pkgp-freebsd-pkg____php81-readline-8.1.4_2 -pkgp-freebsd-pkg____php81-session-8.1.4_2 -pkgp-freebsd-pkg____php81-simplexml-8.1.4_1 -pkgp-freebsd-pkg____php81-soap-8.1.4_1 -pkgp-freebsd-pkg____php81-sockets-8.1.4_2 -pkgp-freebsd-pkg____php81-sqlite3-8.1.4_2 -pkgp-freebsd-pkg____php81-tidy-8.1.4_2 -pkgp-freebsd-pkg____php81-tokenizer-8.1.4_2 -pkgp-freebsd-pkg____php81-xml-8.1.4_1 -pkgp-freebsd-pkg____php81-zip-8.1.4_2 -pkgp-freebsd-pkg____php81-zlib-8.1.4_2 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____prometheus-2.32.1_1 -pkgp-freebsd-pkg____telegraf-1.22.0_1 +pkgp-freebsd-pkg____php81-posix-8.1.13 +pkgp-freebsd-pkg____php81-readline-8.1.13 +pkgp-freebsd-pkg____php81-session-8.1.13 +pkgp-freebsd-pkg____php81-simplexml-8.1.13 +pkgp-freebsd-pkg____php81-soap-8.1.13 +pkgp-freebsd-pkg____php81-sockets-8.1.13 +pkgp-freebsd-pkg____php81-sqlite3-8.1.13 +pkgp-freebsd-pkg____php81-tidy-8.1.13 +pkgp-freebsd-pkg____php81-tokenizer-8.1.13 +pkgp-freebsd-pkg____php81-xml-8.1.13 +pkgp-freebsd-pkg____php81-zip-8.1.13 +pkgp-freebsd-pkg____php81-zlib-8.1.13 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____prometheus-2.39.1 +pkgp-freebsd-pkg____telegraf-1.24.3 diff --git a/jails/config/monitor/pkg-list-old.txt b/jails/config/monitor/pkg-list-old.txt new file mode 100644 index 0000000..d303802 --- /dev/null +++ b/jails/config/monitor/pkg-list-old.txt @@ -0,0 +1 @@ +alertmanager apache24 bash bash-completion grafana9 influxdb iperf3 nano php81 php81-bcmath php81-bz2 php81-ctype php81-curl php81-dom php81-fileinfo php81-filter php81-gd php81-iconv php81-intl php81-mbstring php81-mysqli php81-opcache php81-pdo php81-pdo_mysql php81-pecl-mcrypt php81-pecl-memcache php81-posix php81-readline php81-session php81-simplexml php81-soap php81-sockets php81-sqlite3 php81-tidy php81-tokenizer php81-xml php81-zip php81-zlib pkg prometheus telegraf diff --git a/jails/config/monitor/pkg-list.txt b/jails/config/monitor/pkg-list.txt index 0d474f1..d303802 100644 --- a/jails/config/monitor/pkg-list.txt +++ b/jails/config/monitor/pkg-list.txt @@ -1 +1 @@ -alertmanager apache24 bash bash-completion grafana8 influxdb iperf3 nano php81 php81-bcmath php81-bz2 php81-ctype php81-curl php81-dom php81-fileinfo php81-filter php81-gd php81-iconv php81-intl php81-mbstring php81-mysqli php81-opcache php81-pdo php81-pdo_mysql php81-pecl-mcrypt php81-pecl-memcache php81-posix php81-readline php81-session php81-simplexml php81-soap php81-sockets php81-sqlite3 php81-tidy php81-tokenizer php81-xml php81-zip php81-zlib pkg prometheus telegraf +alertmanager apache24 bash bash-completion grafana9 influxdb iperf3 nano php81 php81-bcmath php81-bz2 php81-ctype php81-curl php81-dom php81-fileinfo php81-filter php81-gd php81-iconv php81-intl php81-mbstring php81-mysqli php81-opcache php81-pdo php81-pdo_mysql php81-pecl-mcrypt php81-pecl-memcache php81-posix php81-readline php81-session php81-simplexml php81-soap php81-sockets php81-sqlite3 php81-tidy php81-tokenizer php81-xml php81-zip php81-zlib pkg prometheus telegraf diff --git a/jails/config/nivi/pkg-list-details-old.txt b/jails/config/nivi/pkg-list-details-old.txt new file mode 100644 index 0000000..d8a27ff --- /dev/null +++ b/jails/config/nivi/pkg-list-details-old.txt @@ -0,0 +1,31 @@ +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____ffmpeg-4.4.3_1,1 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____php81-8.1.12 +pkgp-freebsd-pkg____php81-bz2-8.1.12 +pkgp-freebsd-pkg____php81-ctype-8.1.12 +pkgp-freebsd-pkg____php81-curl-8.1.12 +pkgp-freebsd-pkg____php81-dom-8.1.12 +pkgp-freebsd-pkg____php81-exif-8.1.12 +pkgp-freebsd-pkg____php81-fileinfo-8.1.12 +pkgp-freebsd-pkg____php81-filter-8.1.12 +pkgp-freebsd-pkg____php81-gd-8.1.12 +pkgp-freebsd-pkg____php81-iconv-8.1.12 +pkgp-freebsd-pkg____php81-mbstring-8.1.12 +pkgp-freebsd-pkg____php81-mysqli-8.1.12 +pkgp-freebsd-pkg____php81-opcache-8.1.12 +pkgp-freebsd-pkg____php81-pdo-8.1.12 +pkgp-freebsd-pkg____php81-pdo_mysql-8.1.12 +pkgp-freebsd-pkg____php81-pecl-imagick-3.7.0 +pkgp-freebsd-pkg____php81-posix-8.1.12 +pkgp-freebsd-pkg____php81-session-8.1.12 +pkgp-freebsd-pkg____php81-simplexml-8.1.12 +pkgp-freebsd-pkg____php81-xml-8.1.12 +pkgp-freebsd-pkg____php81-xmlreader-8.1.12 +pkgp-freebsd-pkg____php81-xmlwriter-8.1.12 +pkgp-freebsd-pkg____php81-xsl-8.1.12 +pkgp-freebsd-pkg____php81-zip-8.1.12 +pkgp-freebsd-pkg____php81-zlib-8.1.12 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/nivi/pkg-list-details.txt b/jails/config/nivi/pkg-list-details.txt index 30b1840..a912bd0 100644 --- a/jails/config/nivi/pkg-list-details.txt +++ b/jails/config/nivi/pkg-list-details.txt @@ -1,32 +1,31 @@ -pkgp-freebsd-pkg____apache24-2.4.53 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____ffmpeg-4.4.1_11,1 -pkgp-freebsd-pkg____mod_php81-8.1.4_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____php81-8.1.4_2 -pkgp-freebsd-pkg____php81-bz2-8.1.4_2 -pkgp-freebsd-pkg____php81-ctype-8.1.4_2 -pkgp-freebsd-pkg____php81-curl-8.1.4_2 -pkgp-freebsd-pkg____php81-dom-8.1.4_1 -pkgp-freebsd-pkg____php81-exif-8.1.4_2 -pkgp-freebsd-pkg____php81-fileinfo-8.1.4_2 -pkgp-freebsd-pkg____php81-filter-8.1.4_2 -pkgp-freebsd-pkg____php81-gd-8.1.4_2 -pkgp-freebsd-pkg____php81-iconv-8.1.4_2 -pkgp-freebsd-pkg____php81-mbstring-8.1.4_2 -pkgp-freebsd-pkg____php81-mysqli-8.1.4_2 -pkgp-freebsd-pkg____php81-opcache-8.1.4_2 -pkgp-freebsd-pkg____php81-pdo-8.1.4_2 -pkgp-freebsd-pkg____php81-pdo_mysql-8.1.4_2 -pkgp-freebsd-pkg____php81-pecl-imagick-3.5.1 -pkgp-freebsd-pkg____php81-posix-8.1.4_2 -pkgp-freebsd-pkg____php81-session-8.1.4_2 -pkgp-freebsd-pkg____php81-simplexml-8.1.4_1 -pkgp-freebsd-pkg____php81-xml-8.1.4_1 -pkgp-freebsd-pkg____php81-xmlreader-8.1.4_1 -pkgp-freebsd-pkg____php81-xmlwriter-8.1.4_1 -pkgp-freebsd-pkg____php81-xsl-8.1.4_1 -pkgp-freebsd-pkg____php81-zip-8.1.4_2 -pkgp-freebsd-pkg____php81-zlib-8.1.4_2 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____ffmpeg-4.4.3_1,1 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____php81-8.1.13 +pkgp-freebsd-pkg____php81-bz2-8.1.13 +pkgp-freebsd-pkg____php81-ctype-8.1.13 +pkgp-freebsd-pkg____php81-curl-8.1.13 +pkgp-freebsd-pkg____php81-dom-8.1.13 +pkgp-freebsd-pkg____php81-exif-8.1.13 +pkgp-freebsd-pkg____php81-fileinfo-8.1.13 +pkgp-freebsd-pkg____php81-filter-8.1.13 +pkgp-freebsd-pkg____php81-gd-8.1.13 +pkgp-freebsd-pkg____php81-iconv-8.1.13 +pkgp-freebsd-pkg____php81-mbstring-8.1.13 +pkgp-freebsd-pkg____php81-mysqli-8.1.13 +pkgp-freebsd-pkg____php81-opcache-8.1.13 +pkgp-freebsd-pkg____php81-pdo-8.1.13 +pkgp-freebsd-pkg____php81-pdo_mysql-8.1.13 +pkgp-freebsd-pkg____php81-pecl-imagick-3.7.0 +pkgp-freebsd-pkg____php81-posix-8.1.13 +pkgp-freebsd-pkg____php81-session-8.1.13 +pkgp-freebsd-pkg____php81-simplexml-8.1.13 +pkgp-freebsd-pkg____php81-xml-8.1.13 +pkgp-freebsd-pkg____php81-xmlreader-8.1.13 +pkgp-freebsd-pkg____php81-xmlwriter-8.1.13 +pkgp-freebsd-pkg____php81-xsl-8.1.13 +pkgp-freebsd-pkg____php81-zip-8.1.13 +pkgp-freebsd-pkg____php81-zlib-8.1.13 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/nivi/pkg-list-old.txt b/jails/config/nivi/pkg-list-old.txt new file mode 100644 index 0000000..537b1dd --- /dev/null +++ b/jails/config/nivi/pkg-list-old.txt @@ -0,0 +1 @@ +apache24 bash bash-completion ffmpeg nano php81 php81-bz2 php81-ctype php81-curl php81-dom php81-exif php81-fileinfo php81-filter php81-gd php81-iconv php81-mbstring php81-mysqli php81-opcache php81-pdo php81-pdo_mysql php81-pecl-imagick php81-posix php81-session php81-simplexml php81-xml php81-xmlreader php81-xmlwriter php81-xsl php81-zip php81-zlib pkg diff --git a/jails/config/nivi/pkg-list.txt b/jails/config/nivi/pkg-list.txt index 61545d1..537b1dd 100644 --- a/jails/config/nivi/pkg-list.txt +++ b/jails/config/nivi/pkg-list.txt @@ -1 +1 @@ -apache24 bash bash-completion ffmpeg mod_php81 nano php81 php81-bz2 php81-ctype php81-curl php81-dom php81-exif php81-fileinfo php81-filter php81-gd php81-iconv php81-mbstring php81-mysqli php81-opcache php81-pdo php81-pdo_mysql php81-pecl-imagick php81-posix php81-session php81-simplexml php81-xml php81-xmlreader php81-xmlwriter php81-xsl php81-zip php81-zlib pkg +apache24 bash bash-completion ffmpeg nano php81 php81-bz2 php81-ctype php81-curl php81-dom php81-exif php81-fileinfo php81-filter php81-gd php81-iconv php81-mbstring php81-mysqli php81-opcache php81-pdo php81-pdo_mysql php81-pecl-imagick php81-posix php81-session php81-simplexml php81-xml php81-xmlreader php81-xmlwriter php81-xsl php81-zip php81-zlib pkg diff --git a/jails/config/pg/pkg-list-details-old.txt b/jails/config/pg/pkg-list-details-old.txt new file mode 100644 index 0000000..e9baca8 --- /dev/null +++ b/jails/config/pg/pkg-list-details-old.txt @@ -0,0 +1,5 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____postgresql14-server-14.6 diff --git a/jails/config/pg/pkg-list-details.txt b/jails/config/pg/pkg-list-details.txt index 746ee53..f8891ee 100644 --- a/jails/config/pg/pkg-list-details.txt +++ b/jails/config/pg/pkg-list-details.txt @@ -1,5 +1,5 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____postgresql14-server-14.2 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____postgresql14-server-14.6_1 diff --git a/jails/config/pg/pkg-list-old.txt b/jails/config/pg/pkg-list-old.txt new file mode 100644 index 0000000..e889c2f --- /dev/null +++ b/jails/config/pg/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion nano pkg postgresql14-server diff --git a/jails/config/pkgp/clean-mypkgs.sh b/jails/config/pkgp/clean-mypkgs.sh new file mode 100644 index 0000000..6b10499 --- /dev/null +++ b/jails/config/pkgp/clean-mypkgs.sh @@ -0,0 +1,3 @@ +rm -rf /usr/local/etc/poudriere.d/pj123-options-required +mkdir /usr/local/etc/poudriere.d/pj123-options-required +cat mypkgs | sed 's/\//_/' | xargs -Ixx cp -r /usr/local/etc/poudriere.d/pj123-options/xx /usr/local/etc/poudriere.d/pj123-options-required/xx diff --git a/jails/config/pkgp/mypkgs b/jails/config/pkgp/mypkgs index 2befd19..96aed25 100644 --- a/jails/config/pkgp/mypkgs +++ b/jails/config/pkgp/mypkgs @@ -1,11 +1,11 @@ +shells/bash net/haproxy -net/openldap24-server -net/openldap24-client +net/openldap26-server +net/openldap26-client security/cyrus-sasl2 www/apache24 +www/nginx-devel devel/apr1 -net/php81-ldap -net/php80-ldap mail/postfix mail/dovecot mail/dovecot-pigeonhole @@ -15,4 +15,4 @@ net/netatalk3 net/samba413 net/nss-pam-ldapd net/nss-pam-ldapd-sasl -#security/pam_ldap # included above +www/gitea diff --git a/jails/config/pkgp/mypkgs.orig b/jails/config/pkgp/mypkgs.orig new file mode 100644 index 0000000..b82ece5 --- /dev/null +++ b/jails/config/pkgp/mypkgs.orig @@ -0,0 +1,19 @@ +net/haproxy +net/openldap24-server +net/openldap24-client +security/cyrus-sasl2 +www/apache24 +www/nginx-devel +devel/apr1 +net/php81-ldap +net/php80-ldap +mail/postfix +mail/dovecot +mail/dovecot-pigeonhole +mail/rspamd +mail/dcc-dccd +net/netatalk3 +net/samba413 +net/nss-pam-ldapd +net/nss-pam-ldapd-sasl +www/gitea diff --git a/jails/config/plex/pkg-list-details-old.txt b/jails/config/plex/pkg-list-details-old.txt new file mode 100644 index 0000000..777a78a --- /dev/null +++ b/jails/config/plex/pkg-list-details-old.txt @@ -0,0 +1,6 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____ca_root_nss-3.83 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____plexmediaserver-1.29.1.6316 +pkgp-freebsd-pkg____python27-2.7.18_2 diff --git a/jails/config/plex/pkg-list-details.txt b/jails/config/plex/pkg-list-details.txt index de0738b..539c9cd 100644 --- a/jails/config/plex/pkg-list-details.txt +++ b/jails/config/plex/pkg-list-details.txt @@ -1,6 +1,6 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____ca_root_nss-3.76 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____plexmediaserver-1.25.6.5577 -pkgp-freebsd-pkg____python27-2.7.18_1 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____ca_root_nss-3.83 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____plexmediaserver-1.29.2.6364 +pkgp-freebsd-pkg____python27-2.7.18_2 diff --git a/jails/config/plex/pkg-list-old.txt b/jails/config/plex/pkg-list-old.txt new file mode 100644 index 0000000..8aa412a --- /dev/null +++ b/jails/config/plex/pkg-list-old.txt @@ -0,0 +1 @@ +bash ca_root_nss nano pkg plexmediaserver python27 diff --git a/jails/config/proxy/hap_ocsp_update.sh b/jails/config/proxy/hap_ocsp_update.sh new file mode 100755 index 0000000..acb6e2a --- /dev/null +++ b/jails/config/proxy/hap_ocsp_update.sh @@ -0,0 +1,15 @@ +#!/usr/local/bin/bash + +shopt -u nullglob + +# Certificates path and names +DIR="/mnt/certs" +CERTS="${DIR}/*haproxy.pem.ocsp" + +for CERT in $CERTS; do + +[[ $? -eq 0 ]] && [[ $(pidof haproxy) ]] && [[ -s $CERT ]] && echo "set ssl ocsp-response $(base64 $CERT | tr -d '\n')" | socat tcp-connect:127.0.0.1:9999 - + +done + +exit 0 diff --git a/jails/config/proxy/haproxy.conf b/jails/config/proxy/haproxy.conf index ce19456..78b5567 100644 --- a/jails/config/proxy/haproxy.conf +++ b/jails/config/proxy/haproxy.conf @@ -11,6 +11,10 @@ global daemon + maxconn 4096 + + ca-base /mnt/certs + crt-base /mnt/certs # modern configuration # twilio is one of the sites that cannot handle the modern config # ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256 @@ -22,24 +26,27 @@ global # intermediate configuration ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256 - ssl-default-bind-options prefer-client-ciphers no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets +# ssl-default-bind-options prefer-client-ciphers no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets + ssl-default-bind-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets ssl-default-server-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 ssl-default-server-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256 ssl-default-server-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets - # curl https://ssl-config.mozilla.org/ffdhe2048.txt > /mnt/certs/dhparam2048.pem - ssl-dh-param-file /mnt/certs/dhparam2048.pem + # curl https://ssl-config.mozilla.org/ffdhe4096.txt > /mnt/certs/dhparam4096.pem + ssl-dh-param-file /mnt/certs/dhparam4096.pem - tune.ssl.default-dh-param 2048 + tune.ssl.default-dh-param 4096 #testing #tune.idle-pool.shared off log 127.0.0.1 local0 + # Enable the HAProxy Runtime API + stats socket 127.0.0.1:9999 level admin expose-fd listeners + defaults - log global mode http # option http-use-htx #not supported in 2.5 option forwardfor @@ -49,7 +56,6 @@ defaults option httplog option dontlognull retries 3 - maxconn 4096 timeout http-request 10s timeout http-keep-alive 10s timeout queue 1m @@ -78,11 +84,16 @@ frontend stats frontend ft bind :::80 v4v6 - # bind :::443 v4v6 strict-sni alpn http/1.1 ssl crt /mnt/certs/haproxy.pem crt /mnt/certs/bbhaproxy.pem crt /mnt/certs/diyhaproxy.pem crt /mnt/certs/xflowhaproxy.pem crt /mnt/certs/dvpchaproxy.pem crt /mnt/certs/mdvpchaproxy.pem crt /mnt/certs/rwehaproxy.pem crt /mnt/certs/rwrhaproxy.pem crt /mnt/certs/scvcchaproxy.pem - bind :::443 v4v6 strict-sni alpn h2,http/1.1 ssl crt /mnt/certs/haproxy.pem crt /mnt/certs/bbhaproxy.pem crt /mnt/certs/diyhaproxy.pem crt /mnt/certs/xflowhaproxy.pem crt /mnt/certs/dvpchaproxy.pem crt /mnt/certs/mdvpchaproxy.pem crt /mnt/certs/rwehaproxy.pem crt /mnt/certs/rwrhaproxy.pem crt /mnt/certs/scvcchaproxy.pem + # ssl-min-ver TLSv1.2 ssl-max-ver TLSv1.2 + bind :::443 v4v6 strict-sni alpn h2,http/1.1 ssl crt haproxy.pem crt diyhaproxy.pem crt xflowhaproxy.pem crt dvpchaproxy.pem crt rwehaproxy.pem crt scvcchaproxy.pem redirect scheme https code 301 if !{ ssl_fc } +# enables HTTP/3 over QUIC +# bind quic4@:443 alpn h3 ssl crt haproxy.pem crt diyhaproxy.pem crt xflowhaproxy.pem crt dvpchaproxy.pem crt rwehaproxy.pem crt scvcchaproxy.pem +# Switches to the QUIC protocol +# http-response set-header alt-svc "h3=\":443\";ma=2592000;" + log-format %ci:%cp\ [%t]\ %ft\ %b/%s\ %Tq/%Tw/%Tc/%Tr/%Tt\ %ST\ %B\ %CC\ %CS\ %tsc\ %ac/%fc/%bc/%sc/%rc\ %sq/%bq\ %hr\ %hs\ %{+Q}r\ ssl_version:%sslv\ ssl_cipher:%sslc # acl is_websocket hdr(Upgrade) -i WebSocket @@ -100,6 +111,8 @@ frontend ft http-request set-header X-Forwarded-Ssl on if { ssl_fc } http-response set-header Strict-Transport-Security max-age=63072000 +# http-response set-header Content-Security-Policy "script-src 'self'" + # for Clickjacking - added to individual backends # http-response set-header X-Frame-Options SAMEORIGIN @@ -110,8 +123,11 @@ frontend ft use_backend bk_ahlawat if { req.hdr(host) ahlawat.com } use_backend bk_ahlawat if { req.hdr(host) www.ahlawat.com } + use_backend bk_ahlawat if { req.hdr(host) www2.ahlawat.com } + use_backend bk_ahlawat if { req.hdr(host) mta-sts.ahlawat.com } use_backend bk_ahlawat-sharad if { req.hdr(host) sharad.ahlawat.com } + use_backend bk_ahlawat-sharad if { req.hdr(host) sharad2.ahlawat.com } use_backend bk_ahlawat-rachna if { req.hdr(host) rachna.ahlawat.com } use_backend bk_ahlawat-nivi if { req.hdr(host) nivi.ahlawat.com } use_backend bk_ahlawat-nivi if { req.hdr(host) nivedita.ahlawat.com } @@ -121,18 +137,24 @@ frontend ft use_backend bk_ahlawat-book-444 if { req.hdr(host) book1.ahlawat.com } use_backend bk_ahlawat-book-445 if { req.hdr(host) book2.ahlawat.com } use_backend bk_ahlawat-cam if { req.hdr(host) cam.ahlawat.com } + use_backend bk_ahlawat-cam if { req.hdr(host) cam2.ahlawat.com } use_backend bk_ahlawat-ci if { req.hdr(host) ci.ahlawat.com } use_backend bk_ahlawat-cloud if { req.hdr(host) cloud.ahlawat.com } + use_backend bk_ahlawat-cloud if { req.hdr(host) cloud2.ahlawat.com } use_backend bk_ahlawat-git if { req.hdr(host) git.ahlawat.com } use_backend bk_ahlawat-hub if { req.hdr(host) hub.ahlawat.com } + use_backend bk_ahlawat-hub if { req.hdr(host) hub2.ahlawat.com } use_backend bk_ahlawat-matrix if { req.hdr(host) matrix.ahlawat.com } use_backend bk_ahlawat-meet if { req.hdr(host) meet.ahlawat.com } use_backend bk_ahlawat-monitor if { req.hdr(host) monitor.ahlawat.com } use_backend bk_ahlawat-jump if { req.hdr(host) jump.ahlawat.com } + use_backend bk_ahlawat-jump if { req.hdr(host) jump2.ahlawat.com } use_backend bk_ahlawat-hass if { req.hdr(host) hass.ahlawat.com } + use_backend bk_ahlawat-hass if { req.hdr(host) hass2.ahlawat.com } use_backend bk_diyit if { req.hdr(host) diyit.org } use_backend bk_diyit if { req.hdr(host) www.diyit.org } + use_backend bk_diyit if { req.hdr(host) www2.diyit.org } use_backend bk_diyit if { req.hdr(host) xflow.org } use_backend bk_diyit if { req.hdr(host) www.xflow.org } use_backend bk_diyit-grafana if { req.hdr(host) grafana.diyit.org } @@ -142,41 +164,45 @@ frontend ft use_backend bk_dvpc if { req.hdr(host) datavpc.com } use_backend bk_dvpc if { req.hdr(host) www.datavpc.com } + use_backend bk_dvpc if { req.hdr(host) www2.datavpc.com } use_backend bk_dvpc if { req.hdr(host) mydatavpc.com } use_backend bk_dvpc if { req.hdr(host) www.mydatavpc.com } use_backend bk_rwe if { req.hdr(host) rockwoodestates.org } use_backend bk_rwe if { req.hdr(host) www.rockwoodestates.org } - - use_backend bk_rwr if { req.hdr(host) rockwoodranch.org } - use_backend bk_rwr if { req.hdr(host) www.rockwoodranch.org } + use_backend bk_rwe if { req.hdr(host) www2.rockwoodestates.org } + use_backend bk_rwe if { req.hdr(host) sms1.rockwoodestates.org } + use_backend bk_rwe if { req.hdr(host) sms2.rockwoodestates.org } use_backend bk_scvcc if { req.hdr(host) scvcc-rental.com } use_backend bk_scvcc if { req.hdr(host) www.scvcc-rental.com } + use_backend bk_scvcc if { req.hdr(host) www2.scvcc-rental.com } - use_backend bk_beyondbell if { req.hdr(host) beyondbell.com } - use_backend bk_beyondbell if { req.hdr(host) www.beyondbell.com } - use_backend bk_beyondbell-ci if { req.hdr(host) ci.beyondbell.com } - use_backend bk_beyondbell-git if { req.hdr(host) git.beyondbell.com } - use_backend bk_beyondbell-repo if { req.hdr(host) repo.beyondbell.com } - use_backend bk_beyondbell-dashboard if { req.hdr(host) dashboard.beyondbell.com } - use_backend bk_beyondbell-vault if { req.hdr(host) vault.beyondbell.com } +# use_backend bk_beyondbell if { req.hdr(host) beyondbell.com } +# use_backend bk_beyondbell if { req.hdr(host) www.beyondbell.com } +# use_backend bk_beyondbell-ci if { req.hdr(host) ci.beyondbell.com } +# use_backend bk_beyondbell-git if { req.hdr(host) git.beyondbell.com } +# use_backend bk_beyondbell-repo if { req.hdr(host) repo.beyondbell.com } +# use_backend bk_beyondbell-dashboard if { req.hdr(host) dashboard.beyondbell.com } +# use_backend bk_beyondbell-vault if { req.hdr(host) vault.beyondbell.com } - use_backend bk_beyondbell-web-moonglade if { req.hdr(host) moonglade.beyondbell.com } - use_backend bk_beyondbell-web-moonglade-private if { req.hdr(host) moonglade-private.beyondbell.com } - use_backend bk_beyondbell-r-windows if { req.hdr(host) moonglade-server.beyondbell.com } - use_backend bk_beyondbell-windows if { req.hdr(host) gs.beyondbell.com } +# use_backend bk_beyondbell-web-moonglade if { req.hdr(host) moonglade.beyondbell.com } +# use_backend bk_beyondbell-web-moonglade-private if { req.hdr(host) moonglade-private.beyondbell.com } +# use_backend bk_beyondbell-r-windows if { req.hdr(host) moonglade-server.beyondbell.com } +# use_backend bk_beyondbell-windows if { req.hdr(host) gs.beyondbell.com } - use_backend bk_beyondbell-mazes if { req.hdr(host) mazes.beyondbell.com } - use_backend bk_beyondbell-mazes-backend if { req.hdr(host) mazes-backend.beyondbell.com } +# use_backend bk_beyondbell-mazes if { req.hdr(host) mazes.beyondbell.com } +# use_backend bk_beyondbell-mazes-backend if { req.hdr(host) mazes-backend.beyondbell.com } # Fallback for non-SNI clients acl is-ahlawat hdr(host) -i ahlawat.com acl is-ahlawat hdr(host) -i www.ahlawat.com + acl is-ahlawat hdr(host) -i www2.ahlawat.com use_backend bk_ahlawat if is-ahlawat acl is-diyit hdr(host) -i diyit.org acl is-diyit hdr(host) -i www.diyit.org + acl is-diyit hdr(host) -i www2.diyit.org use_backend bk_diyit if is-diyit default_backend bk_ahlawat @@ -213,17 +239,17 @@ backend bk_ahlawat-rishabh backend bk_ahlawat-book-443 - server srv1 book.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv1 bookx.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 http-response set-header X-Frame-Options SAMEORIGIN backend bk_ahlawat-book-444 - server srv1 book.ahlawat.com:444 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv1 bookx.ahlawat.com:444 check ssl ca-file /mnt/certs/cacert.pem alpn h2 server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 http-response set-header X-Frame-Options SAMEORIGIN backend bk_ahlawat-book-445 - server srv1 book.ahlawat.com:445 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv1 bookx.ahlawat.com:445 check ssl ca-file /mnt/certs/cacert.pem alpn h2 server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 http-response set-header X-Frame-Options SAMEORIGIN @@ -248,8 +274,8 @@ backend bk_ahlawat-git # timeout queue 8s server srv1 gitx.ahlawat.com:3000 check ssl maxconn 32 ca-file /mnt/certs/cacert.pem alpn h2 # server srv2 web.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 - http-response set-header X-Frame-Options "ALLOW-FROM *.diyit.org" -# http-response set-header X-Frame-Options SAMEORIGIN + #http-response set-header X-Frame-Options ALLOW-FROM https://diyit.org # DEPRECATED + http-response set-header Content-Security-Policy "frame-ancestors 'self' https://diyit.org;" backend bk_ahlawat-hub server srv1 hubx.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 @@ -302,7 +328,7 @@ backend bk_diyit-kibana backend bk_diyit-maps server srv1 mapsx.diyit.org:443 ssl ca-file /mnt/certs/cacert.pem alpn h2 -# http-response set-header X-Frame-Options SAMEORIGIN + http-response set-header Content-Security-Policy "frame-ancestors 'self' https://diyit.org;" @@ -315,10 +341,6 @@ backend bk_rwe server srv1 web.rockwoodestates.org:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 http-response set-header X-Frame-Options SAMEORIGIN -backend bk_rwr - server srv1 web.rockwoodranch.org:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 - server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 - http-response set-header X-Frame-Options SAMEORIGIN backend bk_scvcc server srv1 web.scvcc-rental.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 diff --git a/jails/config/proxy/haproxy.conf.old b/jails/config/proxy/haproxy.conf.old new file mode 100644 index 0000000..9b42bc9 --- /dev/null +++ b/jails/config/proxy/haproxy.conf.old @@ -0,0 +1,400 @@ +# Copyright (c) 2018-2022, diyIT.org +# All rights reserved. +# +# BSD 2-Clause License ("Simplified BSD License" or "FreeBSD License") +# https://diyit.org/license/ +# +# + +# https://ssl-config.mozilla.org/#server=haproxy +# Need to use Intermediate setting for Twilio and Jetpack + +global + daemon + +# modern configuration # twilio is one of the sites that cannot handle the modern config +# ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256 +# ssl-default-bind-options prefer-client-ciphers no-sslv3 no-tlsv10 no-tlsv11 no-tlsv12 no-tls-tickets + +# ssl-default-server-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256 +# ssl-default-server-options no-sslv3 no-tlsv10 no-tlsv11 no-tlsv12 no-tls-tickets + + # intermediate configuration + ssl-default-bind-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 + ssl-default-bind-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256 + ssl-default-bind-options prefer-client-ciphers no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets + + ssl-default-server-ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 + ssl-default-server-ciphersuites TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256 + ssl-default-server-options no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets + + # curl https://ssl-config.mozilla.org/ffdhe2048.txt > /mnt/certs/dhparam2048.pem + ssl-dh-param-file /mnt/certs/dhparam2048.pem + + tune.ssl.default-dh-param 2048 + +#testing + #tune.idle-pool.shared off + + log 127.0.0.1 local0 + +defaults + log global + mode http +# option http-use-htx #not supported in 2.5 + option forwardfor + option redispatch + option http-keep-alive + option http-server-close + option httplog + option dontlognull + retries 3 + maxconn 4096 + timeout http-request 10s + timeout http-keep-alive 10s + timeout queue 1m + timeout connect 5s + timeout client 90s + timeout server 90s + timeout check 10s + timeout tunnel 3600s + timeout tarpit 60s + + unique-id-format %{+X}o\ %[hostname,field(1,.),upper]-%Ts%rt + default-server init-addr none resolvers mydns + +resolvers mydns + nameserver ns1 192.168.0.5:53 + +frontend stats + bind :::8404 v4v6 + http-request use-service prometheus-exporter if { path /metrics } + stats enable + stats uri /stats + stats refresh 10s + stats show-node + stats realm Haproxy\ Statistics + stats auth infra:infra + +frontend ft + bind :::80 v4v6 + # bind :::443 v4v6 strict-sni alpn http/1.1 ssl crt /mnt/certs/haproxy.pem crt /mnt/certs/bbhaproxy.pem crt /mnt/certs/diyhaproxy.pem crt /mnt/certs/xflowhaproxy.pem crt /mnt/certs/dvpchaproxy.pem crt /mnt/certs/mdvpchaproxy.pem crt /mnt/certs/rwehaproxy.pem crt /mnt/certs/rwrhaproxy.pem crt /mnt/certs/scvcchaproxy.pem + bind :::443 v4v6 strict-sni alpn h2,http/1.1 ssl crt /mnt/certs/haproxy.pem crt /mnt/certs/bbhaproxy.pem crt /mnt/certs/diyhaproxy.pem crt /mnt/certs/xflowhaproxy.pem crt /mnt/certs/dvpchaproxy.pem crt /mnt/certs/mdvpchaproxy.pem crt /mnt/certs/rwehaproxy.pem crt /mnt/certs/rwrhaproxy.pem crt /mnt/certs/scvcchaproxy.pem + + redirect scheme https code 301 if !{ ssl_fc } + + log-format %ci:%cp\ [%t]\ %ft\ %b/%s\ %Tq/%Tw/%Tc/%Tr/%Tt\ %ST\ %B\ %CC\ %CS\ %tsc\ %ac/%fc/%bc/%sc/%rc\ %sq/%bq\ %hr\ %hs\ %{+Q}r\ ssl_version:%sslv\ ssl_cipher:%sslc + +# acl is_websocket hdr(Upgrade) -i WebSocket +# acl is_websocket hdr_beg(Host) -i ws +# use_backend bk_ahlawat-hass if is_websocket + + acl network_allowed src 192.168.0.0/24 192.168.8.0/24 192.168.50.0/24 192.168.51.0/24 fd01::/64 fd08::/64 fd50::/64 fd51::/64 + # acl restricted_page path -i -m sub /wp-admin ## rockwood needs external access + acl restricted_page path -i -m sub /wp-login + http-request deny if restricted_page !network_allowed + + http-request set-header X-Client-IP "%[src]" + http-request set-header X-Client-Port "%[src_port]" + http-request set-header X-Forwarded-Proto https if { ssl_fc } + http-request set-header X-Forwarded-Ssl on if { ssl_fc } + http-response set-header Strict-Transport-Security max-age=63072000 + + # for Clickjacking - added to individual backends + # http-response set-header X-Frame-Options SAMEORIGIN + + # https://github.com/haproxy/haproxy/issues/1353 + # use req.hdr(host) instead of ssl_fc_sni +# use_backend bk_ahlawat if { ssl_fc_sni ahlawat.com } +# use_backend bk_ahlawat if { ssl_fc_sni www.ahlawat.com } + + use_backend bk_ahlawat if { req.hdr(host) ahlawat.com } + use_backend bk_ahlawat if { req.hdr(host) www.ahlawat.com } + use_backend bk_ahlawat if { req.hdr(host) mta-sts.ahlawat.com } + + use_backend bk_ahlawat-sharad if { req.hdr(host) sharad.ahlawat.com } + use_backend bk_ahlawat-rachna if { req.hdr(host) rachna.ahlawat.com } + use_backend bk_ahlawat-nivi if { req.hdr(host) nivi.ahlawat.com } + use_backend bk_ahlawat-nivi if { req.hdr(host) nivedita.ahlawat.com } + use_backend bk_ahlawat-rishabh if { req.hdr(host) rishabh.ahlawat.com } + + use_backend bk_ahlawat-book-443 if { req.hdr(host) books.ahlawat.com } + use_backend bk_ahlawat-book-444 if { req.hdr(host) book1.ahlawat.com } + use_backend bk_ahlawat-book-445 if { req.hdr(host) book2.ahlawat.com } + use_backend bk_ahlawat-cam if { req.hdr(host) cam.ahlawat.com } + use_backend bk_ahlawat-ci if { req.hdr(host) ci.ahlawat.com } + use_backend bk_ahlawat-cloud if { req.hdr(host) cloud.ahlawat.com } + use_backend bk_ahlawat-git if { req.hdr(host) git.ahlawat.com } + use_backend bk_ahlawat-hub if { req.hdr(host) hub.ahlawat.com } + use_backend bk_ahlawat-matrix if { req.hdr(host) matrix.ahlawat.com } + use_backend bk_ahlawat-meet if { req.hdr(host) meet.ahlawat.com } + use_backend bk_ahlawat-monitor if { req.hdr(host) monitor.ahlawat.com } + use_backend bk_ahlawat-jump if { req.hdr(host) jump.ahlawat.com } + use_backend bk_ahlawat-hass if { req.hdr(host) hass.ahlawat.com } + + use_backend bk_diyit if { req.hdr(host) diyit.org } + use_backend bk_diyit if { req.hdr(host) www.diyit.org } + use_backend bk_diyit if { req.hdr(host) xflow.org } + use_backend bk_diyit if { req.hdr(host) www.xflow.org } + use_backend bk_diyit-grafana if { req.hdr(host) grafana.diyit.org } + use_backend bk_diyit-prometheus if { req.hdr(host) prometheus.diyit.org } + use_backend bk_diyit-kibana if { req.hdr(host) kibana.diyit.org } + use_backend bk_diyit-maps if { req.hdr(host) maps.diyit.org } + + use_backend bk_dvpc if { req.hdr(host) datavpc.com } + use_backend bk_dvpc if { req.hdr(host) www.datavpc.com } + use_backend bk_dvpc if { req.hdr(host) mydatavpc.com } + use_backend bk_dvpc if { req.hdr(host) www.mydatavpc.com } + + use_backend bk_rwe if { req.hdr(host) rockwoodestates.org } + use_backend bk_rwe if { req.hdr(host) www.rockwoodestates.org } + + use_backend bk_rwr if { req.hdr(host) rockwoodranch.org } + use_backend bk_rwr if { req.hdr(host) www.rockwoodranch.org } + + use_backend bk_scvcc if { req.hdr(host) scvcc-rental.com } + use_backend bk_scvcc if { req.hdr(host) www.scvcc-rental.com } + + use_backend bk_beyondbell if { req.hdr(host) beyondbell.com } + use_backend bk_beyondbell if { req.hdr(host) www.beyondbell.com } + use_backend bk_beyondbell-ci if { req.hdr(host) ci.beyondbell.com } + use_backend bk_beyondbell-git if { req.hdr(host) git.beyondbell.com } + use_backend bk_beyondbell-repo if { req.hdr(host) repo.beyondbell.com } + use_backend bk_beyondbell-dashboard if { req.hdr(host) dashboard.beyondbell.com } + use_backend bk_beyondbell-vault if { req.hdr(host) vault.beyondbell.com } + + use_backend bk_beyondbell-web-moonglade if { req.hdr(host) moonglade.beyondbell.com } + use_backend bk_beyondbell-web-moonglade-private if { req.hdr(host) moonglade-private.beyondbell.com } + use_backend bk_beyondbell-r-windows if { req.hdr(host) moonglade-server.beyondbell.com } + use_backend bk_beyondbell-windows if { req.hdr(host) gs.beyondbell.com } + + use_backend bk_beyondbell-mazes if { req.hdr(host) mazes.beyondbell.com } + use_backend bk_beyondbell-mazes-backend if { req.hdr(host) mazes-backend.beyondbell.com } + + # Fallback for non-SNI clients + acl is-ahlawat hdr(host) -i ahlawat.com + acl is-ahlawat hdr(host) -i www.ahlawat.com + use_backend bk_ahlawat if is-ahlawat + + acl is-diyit hdr(host) -i diyit.org + acl is-diyit hdr(host) -i www.diyit.org + use_backend bk_diyit if is-diyit + + default_backend bk_ahlawat + + + +backend bk_ahlawat + server srv1 web.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-sharad +# balance roundrobin + server srv1 sharadx.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 web.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN +# http-response set-header Content-Security-Policy "default-src 'self' *.ahlawat.com" + +backend bk_ahlawat-rachna + server srv1 rachnax.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 web.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-nivi + server srv1 nivix.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 web.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-rishabh + server srv1 rishabhx.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 web.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + + + +backend bk_ahlawat-book-443 + server srv1 book.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-book-444 + server srv1 book.ahlawat.com:444 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-book-445 + server srv1 book.ahlawat.com:445 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-cam + server srv1 192.168.0.54:8765 check + server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-ci +# http-request set-header Host cix.ahlawat.com:8080 + http-request replace-header Host ^([^\ \t:]*:)\ https://ci.ahlawat.com/(.*) \1\ http://cix.ahlawat.com:8080/\2 + http-response replace-header Host ^([^\ \t:]*:)\ http://cix.ahlawat.com:8080/(.*) \1\ https://ci.ahlawat.com/\2 + server srv1 cix.ahlawat.com:8080 check + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-cloud + server srv1 cloudx.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 web.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-git +# timeout queue 8s + server srv1 gitx.ahlawat.com:3000 check ssl maxconn 32 ca-file /mnt/certs/cacert.pem alpn h2 +# server srv2 web.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options "ALLOW-FROM *.diyit.org" +# http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-hub + server srv1 hubx.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 web.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-matrix + server srv1 matrix.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 web.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-meet + server srv1 meet.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 web.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-monitor + server srv1 monitorx.ahlawat.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 +# http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-jump + server srv1 jumpx.ahlawat.com:8080 check + server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_ahlawat-hass + server srv1 hassx.ahlawat.com:8123 check + server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + + + +backend bk_diyit + server srv1 web.diyit.org:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_diyit-grafana + server srv1 grafanax.diyit.org:3000 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_diyit-prometheus + server srv1 prometheusx.diyit.org:9090 check +# ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_diyit-kibana + server srv1 elk.diyit.org:5601 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_diyit-maps + server srv1 mapsx.diyit.org:443 ssl ca-file /mnt/certs/cacert.pem alpn h2 +# http-response set-header X-Frame-Options SAMEORIGIN + + + +backend bk_dvpc + server srv1 web.datavpc.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_rwe + server srv1 web.rockwoodestates.org:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN +backend bk_rwr + server srv1 web.rockwoodranch.org:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_scvcc + server srv1 web.scvcc-rental.com:443 check ssl ca-file /mnt/certs/cacert.pem alpn h2 + server srv2 sharadx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + + + +backend bk_beyondbell +# server srv1 192.168.0.77:8080 + server srv1 rishabhx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_beyondbell-ci +# http-request set-header Host cix.beyondbell.com:8111 + http-request replace-header Host ^([^\ \t:]*:)\ https://ci.beyondbell.com/(.*) \1\ http://192.168.0.73:8111/\2 + http-response replace-header Host ^([^\ \t:]*:)\ http://192.168.0.73:8111/(.*) \1\ https://ci.beyondbell.com/\2 + server srv1 192.168.0.73:8111 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_beyondbell-git + server srv1 gitx.beyondbell.com:3000 check ssl ca-file /mnt/certs/cacert.pem alpn h2 +# server srv2 rishabhx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_beyondbell-repo +# http-request set-header Host 192.168.0.75:8081 +# http-request replace-header Host ^([^\ \t:]*:)\ https://repo.beyondbell.com/(.*) \1\ http://192.168.0.75:8081/\2 +# http-response replace-header Host ^([^\ \t:]*:)\ http://192.168.0.75:8081/(.*) \1\ https://repo.beyondbell.com/\2 + + server srv1 192.168.0.75:8081 + http-response set-header X-Frame-Options SAMEORIGIN + +# http-response del-header Strict-Transport-Security +# http-response add-header Content-Security-Policy: upgrade-insecure-requests + +backend bk_beyondbell-dashboard + http-request replace-header Host ^([^\ \t:]*:)\ https://dashboardx.beyondbell.com/(.*) \1\ http://192.168.0.92:8080/\2 + http-response replace-header Host ^([^\ \t:]*:)\ http://192.168.0.92:8080/(.*) \1\ https://dashboardx.beyondbell.com/\2 + server srv1 192.168.0.92:8080 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_beyondbell-vault + http-request replace-header Host ^([^\ \t:]*:)\ https://vault.beyondbell.com/(.*) \1\ http://192.168.0.93:8200/\2 + http-response replace-header Host ^([^\ \t:]*:)\ http://192.168.0.93:8200/(.*) \1\ https://vault.beyondbell.com/\2 + server srv1 192.168.0.93:8200 +# server srv2 rishabhx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_beyondbell-web-moonglade + server srv1 192.168.0.74:8000 +# server srv2 rishabhx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_beyondbell-web-moonglade-private + server srv1 192.168.0.74:4000 +# server srv2 rishabhx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_beyondbell-r-windows + server srv1 192.168.0.85:4000 + server srv2 rishabhx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_beyondbell-windows + server srv1 192.168.0.81:26900 + server srv2 rishabhx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_beyondbell-mazes + server srv1 192.168.0.171:8080 +# server srv2 rishabhx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN + +backend bk_beyondbell-mazes-backend + server srv1 192.168.0.172:8080 +# server srv2 rishabhx.ahlawat.com:443 backup check ssl ca-file /mnt/certs/cacert.pem alpn h2 + http-response set-header X-Frame-Options SAMEORIGIN diff --git a/jails/config/proxy/pkg-list-details-old.txt b/jails/config/proxy/pkg-list-details-old.txt new file mode 100644 index 0000000..9867ab0 --- /dev/null +++ b/jails/config/proxy/pkg-list-details-old.txt @@ -0,0 +1,9 @@ +pkgp123____haproxy-2.6.6 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____base64-1.5_1 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pidof-20050501 +pkgp-freebsd-pkg____socat-1.7.4.4 +pkgp-freebsd-pkg____turnserver-4.5.2 diff --git a/jails/config/proxy/pkg-list-details.txt b/jails/config/proxy/pkg-list-details.txt index a0374bc..e00cb9e 100644 --- a/jails/config/proxy/pkg-list-details.txt +++ b/jails/config/proxy/pkg-list-details.txt @@ -1,6 +1,9 @@ -pkgp123____haproxy-2.5.5 -pkgp123____pkg-1.17.5_1 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 +pkgp123____haproxy-2.6.7 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____base64-1.5_1 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pidof-20050501 +pkgp-freebsd-pkg____socat-1.7.4.4 pkgp-freebsd-pkg____turnserver-4.5.2 diff --git a/jails/config/proxy/pkg-list-old.txt b/jails/config/proxy/pkg-list-old.txt new file mode 100644 index 0000000..977722d --- /dev/null +++ b/jails/config/proxy/pkg-list-old.txt @@ -0,0 +1 @@ +base64 bash bash-completion haproxy nano pidof pkg socat turnserver diff --git a/jails/config/proxy/pkg-list.txt b/jails/config/proxy/pkg-list.txt index 0c8d2a4..977722d 100644 --- a/jails/config/proxy/pkg-list.txt +++ b/jails/config/proxy/pkg-list.txt @@ -1 +1 @@ -bash bash-completion haproxy nano pkg turnserver +base64 bash bash-completion haproxy nano pidof pkg socat turnserver diff --git a/jails/config/r-api/.keep b/jails/config/r-api/.keep deleted file mode 100644 index e69de29..0000000 diff --git a/jails/config/r-api/pkg-list-details.txt b/jails/config/r-api/pkg-list-details.txt deleted file mode 100644 index 0bf0b30..0000000 --- a/jails/config/r-api/pkg-list-details.txt +++ /dev/null @@ -1,9 +0,0 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____git-2.35.1 -pkgp-freebsd-pkg____htop-3.1.2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openjdk16-16.0.2+7.1_1 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 -pkgp-freebsd-pkg____tmux-3.2a diff --git a/jails/config/r-api/pkg-list.txt b/jails/config/r-api/pkg-list.txt deleted file mode 100644 index 11c696a..0000000 --- a/jails/config/r-api/pkg-list.txt +++ /dev/null @@ -1 +0,0 @@ -bash bash-completion git htop nano openjdk16 pkg sudo tmux diff --git a/jails/config/r-automated/pkg-list-details-old.txt b/jails/config/r-automated/pkg-list-details-old.txt new file mode 100644 index 0000000..dd67ef9 --- /dev/null +++ b/jails/config/r-automated/pkg-list-details-old.txt @@ -0,0 +1,10 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____curl-7.85.0 +pkgp-freebsd-pkg____htop-3.2.1 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____openjdk8-8.352.08.1_1 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____sudo-1.9.12p1 +pkgp-freebsd-pkg____tmux-3.3a +pkgp-freebsd-pkg____wget-1.21.3_1 diff --git a/jails/config/r-automated/pkg-list-details.txt b/jails/config/r-automated/pkg-list-details.txt index cfc738e..73b999d 100644 --- a/jails/config/r-automated/pkg-list-details.txt +++ b/jails/config/r-automated/pkg-list-details.txt @@ -1,10 +1,10 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____curl-7.82.0 -pkgp-freebsd-pkg____htop-3.1.2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openjdk8-8.322.06.1 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 -pkgp-freebsd-pkg____tmux-3.2a -pkgp-freebsd-pkg____wget-1.21.3 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____curl-7.85.0 +pkgp-freebsd-pkg____htop-3.2.1 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____openjdk8-8.352.08.1_1 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____sudo-1.9.12p1 +pkgp-freebsd-pkg____tmux-3.3a +pkgp-freebsd-pkg____wget-1.21.3_1 diff --git a/jails/config/r-automated/pkg-list-old.txt b/jails/config/r-automated/pkg-list-old.txt new file mode 100644 index 0000000..9c721d6 --- /dev/null +++ b/jails/config/r-automated/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion curl htop nano openjdk8 pkg sudo tmux wget diff --git a/jails/config/r-ci/.keep b/jails/config/r-ci/.keep deleted file mode 100644 index e69de29..0000000 diff --git a/jails/config/r-ci/pkg-list-details.txt b/jails/config/r-ci/pkg-list-details.txt deleted file mode 100644 index 1eac302..0000000 --- a/jails/config/r-ci/pkg-list-details.txt +++ /dev/null @@ -1,7 +0,0 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____git-2.35.1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openjdk11-11.0.14+9.1_1 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 diff --git a/jails/config/r-ci/pkg-list.txt b/jails/config/r-ci/pkg-list.txt deleted file mode 100644 index 333e96d..0000000 --- a/jails/config/r-ci/pkg-list.txt +++ /dev/null @@ -1 +0,0 @@ -bash bash-completion git nano openjdk11 pkg sudo diff --git a/jails/config/r-db/pkg-list-details-old.txt b/jails/config/r-db/pkg-list-details-old.txt new file mode 100644 index 0000000..8f9962d --- /dev/null +++ b/jails/config/r-db/pkg-list-details-old.txt @@ -0,0 +1,7 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____htop-3.2.1 +pkgp-freebsd-pkg____mariadb105-server-10.5.17_1 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____sudo-1.9.12p1 diff --git a/jails/config/r-db/pkg-list-details.txt b/jails/config/r-db/pkg-list-details.txt index 16ef27e..439be63 100644 --- a/jails/config/r-db/pkg-list-details.txt +++ b/jails/config/r-db/pkg-list-details.txt @@ -1,7 +1,7 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____htop-3.1.2 -pkgp-freebsd-pkg____mariadb105-server-10.5.15_2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____htop-3.2.1 +pkgp-freebsd-pkg____mariadb105-server-10.5.17_1 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____sudo-1.9.12p1 diff --git a/jails/config/r-db/pkg-list-old.txt b/jails/config/r-db/pkg-list-old.txt new file mode 100644 index 0000000..ae1e591 --- /dev/null +++ b/jails/config/r-db/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion htop mariadb105-server nano pkg sudo diff --git a/jails/config/r-git/gitea/conf/app.ini b/jails/config/r-git/gitea/conf/app.ini new file mode 100644 index 0000000..3a78601 --- /dev/null +++ b/jails/config/r-git/gitea/conf/app.ini @@ -0,0 +1,98 @@ +# # Sample Configuration for Gitea using SQLite +# +# For information on the available settings, consult the online +# documentation, or see the accompanying file app.ini.defaults, which +# contains the settings incorporated into the gitea binary. +# +# This sample configuration runs Gitea with a local database. Before +# running this configuration, make sure to change the SECRET_KEY and the +# INTERNAL_TOKEN at the end of this file. SECRET_KEY is a password of your +# choosing, INTERNAL_TOKEN is a 64-byte random number in BASE64 encoding. +# Your can generate the token using for example: +# openssl rand -base64 64 +# +# There are no pre-configured users; the first user to register becomes an +# admin. In this sample configuration, the HTTP server only listens on +# localhost. +# +# If you'd rather use the web-based installer, remove this conf/app.ini file +# and make /usr/local/etc/gitea/conf writeable to the git user. +APP_NAME = Beyondbell +RUN_USER = git +RUN_MODE = prod + +[database] +DB_TYPE = mysql +HOST = 192.168.0.76:3306 +NAME = gitea +USER = gitea +PASSWD = r-db-gitea + +[indexer] +ISSUE_INDEXER_PATH = /var/db/gitea/indexers/issues.bleve + +[log] +ROOT_PATH = /var/log/gitea +MODE = file +LEVEL = Info +ENABLE_ACCESS_LOG = true +ACCESS = file + +[picture] +DISABLE_GRAVATAR = true +AVATAR_UPLOAD_PATH = /var/db/gitea/data/avatars + +[repository] +ROOT = /var/db/gitea/gitea-repositories + +# Gitea's default is 'bash', so if you have bash installed, you can comment +# this out. +#SCRIPT_TYPE = sh + +[repository.upload] +TEMP_PATH = /var/db/gitea/data/tmp/uploads + +[security] +INSTALL_LOCK = true +INTERNAL_TOKEN = 1FFhAklka01JhgJTRUrFujWYiv4ijqcTIfXJ9o4n1fWxz+XVQdXhrqDTlsnD7fvz7gugdhgkx0FY2Lx6IBdPQw== +SECRET_KEY = BeyondChangeMeBeforeRunningBell +IMPORT_LOCAL_PATHS = false + +[session] +COOKIE_SECURE = true + +[server] +DOMAIN = gitx.beyondbell.com +PROTOCOL = https +HTTP_ADDR = :: +HTTP_PORT = 3000 +ROOT_URL = https://git.ahlawat.com/ +DISABLE_SSH = flase +SSH_DOMAIN = %(DOMAIN)s +SSH_PORT = 22 +OFFLINE_MODE = false +APP_DATA_PATH = /var/db/gitea/data +CERT_FILE = /mnt/certs/bbfullchain.pem +KEY_FILE = /mnt/certs/bbprivkeyr.pem +LANDING_PAGE = explore +LFS_START_SERVER = true +LFS_CONTENT_PATH = /var/db/gitea/lfs +LFS_JWT_SECRET = IKNSyUy-E0XOBuOwf8fbmUlvZ-Auzy92aAlIs8bNUW4 +LFS_HTTP_AUTH_EXPIRY = 20m + +[service] +DISABLE_REGISTRATION = true + +[openid] +ENABLE_OPENID_SIGNIN = false + +[other] +SHOW_FOOTER_BRANDING = false +SHOW_FOOTER_VERSION = false +SHOW_FOOTER_TEMPLATE_LOAD_TIME = false + +[oauth2] +JWT_SECRET = GCQXhTE1eD7q_NNe8q3dSJf91iPvrRydRAIRo4YIEAA + +[ui] +DEFAULT_THEME = arc-green diff --git a/jails/config/r-git/gitea/conf/app.ini.defaults b/jails/config/r-git/gitea/conf/app.ini.defaults index a674984..586c924 100644 --- a/jails/config/r-git/gitea/conf/app.ini.defaults +++ b/jails/config/r-git/gitea/conf/app.ini.defaults @@ -1,785 +1,2208 @@ - ; This file lists the default values used by Gitea -; Copy required sections to your own app.ini (default is custom/conf/app.ini) -; and modify as needed. +;; Copy required sections to your own app.ini (default is custom/conf/app.ini) +;; and modify as needed. +;; Do not copy the whole file as-is, as it contains some invalid sections for illustrative purposes. +;; If you don't know what a setting is you should not set it. +;; +;; see https://docs.gitea.io/en-us/config-cheat-sheet/ for additional documentation. -; see https://docs.gitea.io/en-us/config-cheat-sheet/ for additional documentation. -; App name that shows in every page title -APP_NAME = Gitea: Git with a cup of tea -; Change it if you run locally -RUN_USER = git -; Either "dev", "prod" or "test", default is "dev" -RUN_MODE = dev - -[repository] -ROOT = -SCRIPT_TYPE = bash -; Default ANSI charset -ANSI_CHARSET = -; Force every new repository to be private -FORCE_PRIVATE = false -; Default privacy setting when creating a new repository, allowed values: last, private, public. Default is last which means the last setting used. -DEFAULT_PRIVATE = last -; Global limit of repositories per user, applied at creation time. -1 means no limit -MAX_CREATION_LIMIT = -1 -; Mirror sync queue length, increase if mirror syncing starts hanging -MIRROR_QUEUE_LENGTH = 1000 -; Patch test queue length, increase if pull request patch testing starts hanging -PULL_REQUEST_QUEUE_LENGTH = 1000 -; Preferred Licenses to place at the top of the List -; The name here must match the filename in conf/license or custom/conf/license -PREFERRED_LICENSES = Apache License 2.0,MIT License -; Disable the ability to interact with repositories using the HTTP protocol -DISABLE_HTTP_GIT = false -; Value for Access-Control-Allow-Origin header, default is not to present -; WARNING: This maybe harmful to you website if you do not give it a right value. -ACCESS_CONTROL_ALLOW_ORIGIN = -; Force ssh:// clone url instead of scp-style uri when default SSH port is used -USE_COMPAT_SSH_URI = false -; Close issues as long as a commit on any branch marks it as fixed -DEFAULT_CLOSE_ISSUES_VIA_COMMITS_IN_ANY_BRANCH = false - -[repository.editor] -; List of file extensions for which lines should be wrapped in the CodeMirror editor -; Separate extensions with a comma. To line wrap files without an extension, just put a comma -LINE_WRAP_EXTENSIONS = .txt,.md,.markdown,.mdown,.mkd, -; Valid file modes that have a preview API associated with them, such as api/v1/markdown -; Separate the values by commas. The preview tab in edit mode won't be displayed if the file extension doesn't match -PREVIEWABLE_FILE_MODES = markdown - -[repository.local] -; Path for local repository copy. Defaults to `tmp/local-repo` -LOCAL_COPY_PATH = tmp/local-repo -; Path for local wiki copy. Defaults to `tmp/local-wiki` -LOCAL_WIKI_PATH = tmp/local-wiki - -[repository.upload] -; Whether repository file uploads are enabled. Defaults to `true` -ENABLED = true -; Path for uploads. Defaults to `data/tmp/uploads` (tmp gets deleted on gitea restart) -TEMP_PATH = data/tmp/uploads -; One or more allowed types, e.g. image/jpeg|image/png. Nothing means any file type -ALLOWED_TYPES = -; Max size of each file in megabytes. Defaults to 3MB -FILE_MAX_SIZE = 3 -; Max number of files per upload. Defaults to 5 -MAX_FILES = 5 - -[repository.pull-request] -; List of prefixes used in Pull Request title to mark them as Work In Progress -WORK_IN_PROGRESS_PREFIXES=WIP:,[WIP] - -[repository.issue] -; List of reasons why a Pull Request or Issue can be locked -LOCK_REASONS=Too heated,Off-topic,Resolved,Spam - -[cors] -; More information about CORS can be found here: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#The_HTTP_response_headers -; enable cors headers (disabled by default) -ENABLED=false -; scheme of allowed requests -SCHEME=http -; list of requesting domains that are allowed -ALLOW_DOMAIN=* -; allow subdomains of headers listed above to request -ALLOW_SUBDOMAIN=false -; list of methods allowed to request -METHODS=GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS -; max time to cache response -MAX_AGE=10m -; allow request with credentials -ALLOW_CREDENTIALS=false - -[ui] -; Number of repositories that are displayed on one explore page -EXPLORE_PAGING_NUM = 20 -; Number of issues that are displayed on one page -ISSUE_PAGING_NUM = 10 -; Number of maximum commits displayed in one activity feed -FEED_MAX_COMMIT_NUM = 5 -; Number of maximum commits displayed in commit graph. -GRAPH_MAX_COMMIT_NUM = 100 -; Number of line of codes shown for a code comment -CODE_COMMENT_LINES = 4 -; Value of `theme-color` meta tag, used by Android >= 5.0 -; An invalid color like "none" or "disable" will have the default style -; More info: https://developers.google.com/web/updates/2014/11/Support-for-theme-color-in-Chrome-39-for-Android -THEME_COLOR_META_TAG = `#6cc644` -; Max size of files to be displayed (default is 8MiB) -MAX_DISPLAY_FILE_SIZE = 8388608 -; Whether the email of the user should be shown in the Explore Users page -SHOW_USER_EMAIL = true -; Set the default theme for the Gitea install -DEFAULT_THEME = gitea -; All available themes. Allow users select personalized themes regardless of the value of `DEFAULT_THEME`. -THEMES = gitea,arc-green -; Whether the full name of the users should be shown where possible. If the full name isn't set, the username will be used. -DEFAULT_SHOW_FULL_NAME = false - -[ui.admin] -; Number of users that are displayed on one page -USER_PAGING_NUM = 50 -; Number of repos that are displayed on one page -REPO_PAGING_NUM = 50 -; Number of notices that are displayed on one page -NOTICE_PAGING_NUM = 25 -; Number of organizations that are displayed on one page -ORG_PAGING_NUM = 50 - -[ui.user] -; Number of repos that are displayed on one page -REPO_PAGING_NUM = 15 - -[ui.meta] -AUTHOR = Gitea - Git with a cup of tea -DESCRIPTION = Gitea (Git with a cup of tea) is a painless self-hosted Git service written in Go -KEYWORDS = go,git,self-hosted,gitea - -[markdown] -; Enable hard line break extension -ENABLE_HARD_LINE_BREAK = false -; List of custom URL-Schemes that are allowed as links when rendering Markdown -; for example git,magnet -CUSTOM_URL_SCHEMES = -; List of file extensions that should be rendered/edited as Markdown -; Separate the extensions with a comma. To render files without any extension as markdown, just put a comma -FILE_EXTENSIONS = .md,.markdown,.mdown,.mkd +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; General Settings +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; App name that shows in every page title +APP_NAME = ; Gitea: Git with a cup of tea +;; +;; RUN_USER will automatically detect the current user - but you can set it here change it if you run locally +RUN_USER = ; git +;; +;; Application run mode, affects performance and debugging. Either "dev", "prod" or "test", default is "prod" +RUN_MODE = ; prod +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; [server] -; The protocol the server listens on. One of 'http', 'https', 'unix' or 'fcgi'. -PROTOCOL = http -DOMAIN = localhost -ROOT_URL = %(PROTOCOL)s://%(DOMAIN)s:%(HTTP_PORT)s/ -; The address to listen on. Either a IPv4/IPv6 address or the path to a unix socket. -HTTP_ADDR = 0.0.0.0 -HTTP_PORT = 3000 -; If REDIRECT_OTHER_PORT is true, and PROTOCOL is set to https an http server -; will be started on PORT_TO_REDIRECT and it will redirect plain, non-secure http requests to the main -; ROOT_URL. Defaults are false for REDIRECT_OTHER_PORT and 80 for -; PORT_TO_REDIRECT. -REDIRECT_OTHER_PORT = false -PORT_TO_REDIRECT = 80 -; Permission for unix socket -UNIX_SOCKET_PERMISSION = 666 -; Local (DMZ) URL for Gitea workers (such as SSH update) accessing web service. -; In most cases you do not need to change the default value. -; Alter it only if your SSH server node is not the same as HTTP node. -; Do not set this variable if PROTOCOL is set to 'unix'. -LOCAL_ROOT_URL = %(PROTOCOL)s://%(HTTP_ADDR)s:%(HTTP_PORT)s/ -; Disable SSH feature when not available -DISABLE_SSH = false -; Whether to use the builtin SSH server or not. -START_SSH_SERVER = false -; Username to use for the builtin SSH server. If blank, then it is the value of RUN_USER. -BUILTIN_SSH_SERVER_USER = -; Domain name to be exposed in clone URL -SSH_DOMAIN = %(DOMAIN)s -; The network interface the builtin SSH server should listen on -SSH_LISTEN_HOST = -; Port number to be exposed in clone URL -SSH_PORT = 22 -; The port number the builtin SSH server should listen on -SSH_LISTEN_PORT = %(SSH_PORT)s -; Root path of SSH directory, default is '~/.ssh', but you have to use '/home/git/.ssh'. -SSH_ROOT_PATH = -; Gitea will create a authorized_keys file by default when it is not using the internal ssh server -; If you intend to use the AuthorizedKeysCommand functionality then you should turn this off. -SSH_CREATE_AUTHORIZED_KEYS_FILE = true -; For the built-in SSH server, choose the ciphers to support for SSH connections, -; for system SSH this setting has no effect -SSH_SERVER_CIPHERS = aes128-ctr, aes192-ctr, aes256-ctr, aes128-gcm@openssh.com, arcfour256, arcfour128 -; For the built-in SSH server, choose the key exchange algorithms to support for SSH connections, -; for system SSH this setting has no effect -SSH_SERVER_KEY_EXCHANGES = diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, curve25519-sha256@libssh.org -; For the built-in SSH server, choose the MACs to support for SSH connections, -; for system SSH this setting has no effect -SSH_SERVER_MACS = hmac-sha2-256-etm@openssh.com, hmac-sha2-256, hmac-sha1, hmac-sha1-96 -; Directory to create temporary files in when testing public keys using ssh-keygen, -; default is the system temporary directory. -SSH_KEY_TEST_PATH = -; Path to ssh-keygen, default is 'ssh-keygen' which means the shell is responsible for finding out which one to call. -SSH_KEYGEN_PATH = ssh-keygen -; Enable SSH Authorized Key Backup when rewriting all keys, default is true -SSH_BACKUP_AUTHORIZED_KEYS = true -; Enable exposure of SSH clone URL to anonymous visitors, default is false -SSH_EXPOSE_ANONYMOUS = false -; Indicate whether to check minimum key size with corresponding type -MINIMUM_KEY_SIZE_CHECK = false -; Disable CDN even in "prod" mode -OFFLINE_MODE = false -DISABLE_ROUTER_LOG = false -; Generate steps: -; $ ./gitea cert -ca=true -duration=8760h0m0s -host=myhost.example.com -; -; Or from a .pfx file exported from the Windows certificate store (do -; not forget to export the private key): -; $ openssl pkcs12 -in cert.pfx -out cert.pem -nokeys -; $ openssl pkcs12 -in cert.pfx -out key.pem -nocerts -nodes -CERT_FILE = custom/https/cert.pem -KEY_FILE = custom/https/key.pem -; Root directory containing templates and static files. -; default is the path where Gitea is executed -STATIC_ROOT_PATH = -; Default path for App data -APP_DATA_PATH = data -; Application level GZIP support -ENABLE_GZIP = false -; Application profiling (memory and cpu) -; For "web" command it listens on localhost:6060 -; For "serve" command it dumps to disk at PPROF_DATA_PATH as (cpuprofile|memprofile)__ -ENABLE_PPROF = false -; PPROF_DATA_PATH, use an absolute path when you start gitea as service -PPROF_DATA_PATH = data/tmp/pprof -; Landing page, can be "home", "explore", or "organizations" -LANDING_PAGE = home -; Enables git-lfs support. true or false, default is false. -LFS_START_SERVER = false -; Where your lfs files reside, default is data/lfs. -LFS_CONTENT_PATH = data/lfs -; LFS authentication secret, change this yourself +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; The protocol the server listens on. One of 'http', 'https', 'unix' or 'fcgi'. Defaults to 'http' +;PROTOCOL = http +;; +;; Set the domain for the server +;DOMAIN = localhost +;; +;; Overwrite the automatically generated public URL. Necessary for proxies and docker. +;ROOT_URL = %(PROTOCOL)s://%(DOMAIN)s:%(HTTP_PORT)s/ +;; +;; when STATIC_URL_PREFIX is empty it will follow ROOT_URL +;STATIC_URL_PREFIX = +;; +;; The address to listen on. Either a IPv4/IPv6 address or the path to a unix socket. +;HTTP_ADDR = 0.0.0.0 +;; +;; The port to listen on. Leave empty when using a unix socket. +;HTTP_PORT = 3000 +;; +;; If REDIRECT_OTHER_PORT is true, and PROTOCOL is set to https an http server +;; will be started on PORT_TO_REDIRECT and it will redirect plain, non-secure http requests to the main +;; ROOT_URL. Defaults are false for REDIRECT_OTHER_PORT and 80 for +;; PORT_TO_REDIRECT. +;REDIRECT_OTHER_PORT = false +;PORT_TO_REDIRECT = 80 +;; +;; Minimum and maximum supported TLS versions +;SSL_MIN_VERSION=TLSv1.2 +;SSL_MAX_VERSION= +;; +;; SSL Curve Preferences +;SSL_CURVE_PREFERENCES=X25519,P256 +;; +;; SSL Cipher Suites +;SSL_CIPHER_SUITES=; Will default to "ecdhe_ecdsa_with_aes_256_gcm_sha384,ecdhe_rsa_with_aes_256_gcm_sha384,ecdhe_ecdsa_with_aes_128_gcm_sha256,ecdhe_rsa_with_aes_128_gcm_sha256,ecdhe_ecdsa_with_chacha20_poly1305,ecdhe_rsa_with_chacha20_poly1305" if aes is supported by hardware, otherwise chacha will be first. +;; +;; Timeout for any write to the connection. (Set to 0 to disable all timeouts.) +;PER_WRITE_TIMEOUT = 30s +;; +;; Timeout per Kb written to connections. +;PER_WRITE_PER_KB_TIMEOUT = 30s +;; +;; Permission for unix socket +;UNIX_SOCKET_PERMISSION = 666 +;; +;; Local (DMZ) URL for Gitea workers (such as SSH update) accessing web service. +;; In most cases you do not need to change the default value. +;; Alter it only if your SSH server node is not the same as HTTP node. +;; Do not set this variable if PROTOCOL is set to 'unix'. +;LOCAL_ROOT_URL = %(PROTOCOL)s://%(HTTP_ADDR)s:%(HTTP_PORT)s/ +;; +;; Disable SSH feature when not available +;DISABLE_SSH = false +;; +;; Whether to use the builtin SSH server or not. +;START_SSH_SERVER = false +;; +;; Username to use for the builtin SSH server. If blank, then it is the value of RUN_USER. +;BUILTIN_SSH_SERVER_USER = +;; +;; Domain name to be exposed in clone URL +;SSH_DOMAIN = %(DOMAIN)s +;; +;; The network interface the builtin SSH server should listen on +;SSH_LISTEN_HOST = +;; +;; Port number to be exposed in clone URL +;SSH_PORT = 22 +;; +;; The port number the builtin SSH server should listen on +;SSH_LISTEN_PORT = %(SSH_PORT)s +;; +;; Root path of SSH directory, default is '~/.ssh', but you have to use '/home/git/.ssh'. +;SSH_ROOT_PATH = +;; +;; Gitea will create a authorized_keys file by default when it is not using the internal ssh server +;; If you intend to use the AuthorizedKeysCommand functionality then you should turn this off. +;SSH_CREATE_AUTHORIZED_KEYS_FILE = true +;; +;; Gitea will create a authorized_principals file by default when it is not using the internal ssh server +;; If you intend to use the AuthorizedPrincipalsCommand functionality then you should turn this off. +;SSH_CREATE_AUTHORIZED_PRINCIPALS_FILE = true +;; +;; For the built-in SSH server, choose the ciphers to support for SSH connections, +;; for system SSH this setting has no effect +;SSH_SERVER_CIPHERS = aes128-ctr, aes192-ctr, aes256-ctr, aes128-gcm@openssh.com, arcfour256, arcfour128 +;; +;; For the built-in SSH server, choose the key exchange algorithms to support for SSH connections, +;; for system SSH this setting has no effect +;SSH_SERVER_KEY_EXCHANGES = diffie-hellman-group1-sha1, diffie-hellman-group14-sha1, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, curve25519-sha256@libssh.org +;; +;; For the built-in SSH server, choose the MACs to support for SSH connections, +;; for system SSH this setting has no effect +;SSH_SERVER_MACS = hmac-sha2-256-etm@openssh.com, hmac-sha2-256, hmac-sha1, hmac-sha1-96 +;; +;; For the built-in SSH server, choose the keypair to offer as the host key +;; The private key should be at SSH_SERVER_HOST_KEY and the public SSH_SERVER_HOST_KEY.pub +;; relative paths are made absolute relative to the APP_DATA_PATH +;SSH_SERVER_HOST_KEYS=ssh/gitea.rsa, ssh/gogs.rsa +;; +;; Directory to create temporary files in when testing public keys using ssh-keygen, +;; default is the system temporary directory. +;SSH_KEY_TEST_PATH = +;; +;; Path to ssh-keygen, default is 'ssh-keygen' which means the shell is responsible for finding out which one to call. +;SSH_KEYGEN_PATH = ssh-keygen +;; +;; Enable SSH Authorized Key Backup when rewriting all keys, default is true +;SSH_AUTHORIZED_KEYS_BACKUP = true +;; +;; Determines which principals to allow +;; - empty: if SSH_TRUSTED_USER_CA_KEYS is empty this will default to off, otherwise will default to email, username. +;; - off: Do not allow authorized principals +;; - email: the principal must match the user's email +;; - username: the principal must match the user's username +;; - anything: there will be no checking on the content of the principal +;SSH_AUTHORIZED_PRINCIPALS_ALLOW = email, username +;; +;; Enable SSH Authorized Principals Backup when rewriting all keys, default is true +;SSH_AUTHORIZED_PRINCIPALS_BACKUP = true +;; +;; Specifies the public keys of certificate authorities that are trusted to sign user certificates for authentication. +;; Multiple keys should be comma separated. +;; E.g."ssh- ". or "ssh- , ssh- ". +;; For more information see "TrustedUserCAKeys" in the sshd config manpages. +;SSH_TRUSTED_USER_CA_KEYS = +;; Absolute path of the `TrustedUserCaKeys` file gitea will manage. +;; Default this `RUN_USER`/.ssh/gitea-trusted-user-ca-keys.pem +;; If you're running your own ssh server and you want to use the gitea managed file you'll also need to modify your +;; sshd_config to point to this file. The official docker image will automatically work without further configuration. +;SSH_TRUSTED_USER_CA_KEYS_FILENAME = +;; +;; Enable exposure of SSH clone URL to anonymous visitors, default is false +;SSH_EXPOSE_ANONYMOUS = false +;; +;; Timeout for any write to ssh connections. (Set to 0 to disable all timeouts.) +;; Will default to the PER_WRITE_TIMEOUT. +;SSH_PER_WRITE_TIMEOUT = 30s +;; +;; Timeout per Kb written to ssh connections. +;; Will default to the PER_WRITE_PER_KB_TIMEOUT. +;SSH_PER_WRITE_PER_KB_TIMEOUT = 30s +;; +;; Indicate whether to check minimum key size with corresponding type +;MINIMUM_KEY_SIZE_CHECK = false +;; +;; Disable CDN even in "prod" mode +;OFFLINE_MODE = false +;DISABLE_ROUTER_LOG = false +;; +;; Generate steps: +;; $ ./gitea cert -ca=true -duration=8760h0m0s -host=myhost.example.com +;; +;; Or from a .pfx file exported from the Windows certificate store (do +;; not forget to export the private key): +;; $ openssl pkcs12 -in cert.pfx -out cert.pem -nokeys +;; $ openssl pkcs12 -in cert.pfx -out key.pem -nocerts -nodes +;; Paths are relative to CUSTOM_PATH +;CERT_FILE = https/cert.pem +;KEY_FILE = https/key.pem +;; +;; Root directory containing templates and static files. +;; default is the path where Gitea is executed +;STATIC_ROOT_PATH = +;; +;; Default path for App data +;APP_DATA_PATH = data +;; +;; Enable gzip compression for runtime-generated content, static resources excluded +;ENABLE_GZIP = false +;; +;; Application profiling (memory and cpu) +;; For "web" command it listens on localhost:6060 +;; For "serve" command it dumps to disk at PPROF_DATA_PATH as (cpuprofile|memprofile)__ +;ENABLE_PPROF = false +;; +;; PPROF_DATA_PATH, use an absolute path when you start gitea as service +;PPROF_DATA_PATH = data/tmp/pprof +;; +;; Landing page, can be "home", "explore", "organizations" or "login" +;; The "login" choice is not a security measure but just a UI flow change, use REQUIRE_SIGNIN_VIEW to force users to log in. +;LANDING_PAGE = home +;; +;; Enables git-lfs support. true or false, default is false. +;LFS_START_SERVER = false +;; +;; Where your lfs files reside, default is data/lfs. +;LFS_CONTENT_PATH = data/lfs +;; +;; LFS authentication secret, change this yourself LFS_JWT_SECRET = -; LFS authentication validity period (in time.Duration), pushes taking longer than this may fail. -LFS_HTTP_AUTH_EXPIRY = 20m - -; Define allowed algorithms and their minimum key length (use -1 to disable a type) -[ssh.minimum_key_sizes] -ED25519 = 256 -ECDSA = 256 -RSA = 2048 -DSA = 1024 +;; +;; LFS authentication validity period (in time.Duration), pushes taking longer than this may fail. +;LFS_HTTP_AUTH_EXPIRY = 20m +;; +;; Maximum allowed LFS file size in bytes (Set to 0 for no limit). +;LFS_MAX_FILE_SIZE = 0 +;; +;; Maximum number of locks returned per page +;LFS_LOCKS_PAGING_NUM = 50 +;; +;; Allow graceful restarts using SIGHUP to fork +;ALLOW_GRACEFUL_RESTARTS = true +;; +;; After a restart the parent will finish ongoing requests before +;; shutting down. Force shutdown if this process takes longer than this delay. +;; set to a negative value to disable +;GRACEFUL_HAMMER_TIME = 60s +;; +;; Allows the setting of a startup timeout and waithint for Windows as SVC service +;; 0 disables this. +;STARTUP_TIMEOUT = 0 +;; +;; Static resources, includes resources on custom/, public/ and all uploaded avatars web browser cache time. Note that this cache is disabled when RUN_MODE is "dev". Default is 6h +;STATIC_CACHE_TIME = 6h +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; [database] -; Either "mysql", "postgres", "mssql" or "sqlite3", it's your choice +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Database to use. Either "mysql", "postgres", "mssql" or "sqlite3". +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; MySQL Configuration +;; DB_TYPE = mysql -HOST = 127.0.0.1:3306 +HOST = 127.0.0.1:3306 ; can use socket e.g. /var/run/mysqld/mysqld.sock NAME = gitea USER = root -; Use PASSWD = `your password` for quoting if you use special characters in the password. -PASSWD = -; For Postgres, either "disable" (default), "require", or "verify-full" -; For MySQL, either "false" (default), "true", or "skip-verify" -SSL_MODE = disable -; For MySQL only, either "utf8" or "utf8mb4", default is "utf8". -; NOTICE: for "utf8mb4" you must use MySQL InnoDB > 5.6. Gitea is unable to check this. -CHARSET = utf8 -; For "sqlite3" and "tidb", use an absolute path when you start gitea as service -PATH = data/gitea.db -; For "sqlite3" only. Query timeout -SQLITE_TIMEOUT = 500 -; For iterate buffer, default is 50 -ITERATE_BUFFER_SIZE = 50 -; Show the database generated SQL -LOG_SQL = true -; Maximum number of DB Connect retries -DB_RETRIES = 10 -; Backoff time per DB retry (time.Duration) -DB_RETRY_BACKOFF = 3s - -[indexer] -; Issue indexer type, currently support: bleve or db, default is bleve -ISSUE_INDEXER_TYPE = bleve -; Issue indexer storage path, available when ISSUE_INDEXER_TYPE is bleve -ISSUE_INDEXER_PATH = indexers/issues.bleve -; Issue indexer queue, currently support: channel or levelqueue, default is levelqueue -ISSUE_INDEXER_QUEUE_TYPE = levelqueue -; When ISSUE_INDEXER_QUEUE_TYPE is levelqueue, this will be the queue will be saved path, -; default is indexers/issues.queue -ISSUE_INDEXER_QUEUE_DIR = indexers/issues.queue -; When `ISSUE_INDEXER_QUEUE_TYPE` is `redis`, this will store the redis connection string. -ISSUE_INDEXER_QUEUE_CONN_STR = "addrs=127.0.0.1:6379 db=0" -; Batch queue number, default is 20 -ISSUE_INDEXER_QUEUE_BATCH_NUMBER = 20 - -; repo indexer by default disabled, since it uses a lot of disk space -REPO_INDEXER_ENABLED = false -REPO_INDEXER_PATH = indexers/repos.bleve -UPDATE_BUFFER_LEN = 20 -MAX_FILE_SIZE = 1048576 - -[admin] -; Disallow regular (non-admin) users from creating organizations. -DISABLE_REGULAR_ORG_CREATION = false +;PASSWD = ;Use PASSWD = `your password` for quoting if you use special characters in the password. +;SSL_MODE = false ; either "false" (default), "true", or "skip-verify" +;CHARSET = utf8mb4 ;either "utf8" or "utf8mb4", default is "utf8mb4". +;; +;; NOTICE: for "utf8mb4" you must use MySQL InnoDB > 5.6. Gitea is unable to check this. +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Postgres Configuration +;; +;DB_TYPE = postgres +;HOST = 127.0.0.1:5432 ; can use socket e.g. /var/run/postgresql/ +;NAME = gitea +;USER = root +;PASSWD = +;SCHEMA = +;SSL_MODE=disable ;either "disable" (default), "require", or "verify-full" +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; SQLite Configuration +;; +;DB_TYPE = sqlite3 +;PATH= ; defaults to data/gitea.db +;SQLITE_TIMEOUT = ; Query timeout defaults to: 500 +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; MSSQL Configuration +;; +;DB_TYPE = mssql +;HOST = 172.17.0.2:1433 +;NAME = gitea +;USER = SA +;PASSWD = MwantsaSecurePassword1 +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Other settings +;; +;; For iterate buffer, default is 50 +;ITERATE_BUFFER_SIZE = 50 +;; +;; Show the database generated SQL +LOG_SQL = false ; if unset defaults to true +;; +;; Maximum number of DB Connect retries +;DB_RETRIES = 10 +;; +;; Backoff time per DB retry (time.Duration) +;DB_RETRY_BACKOFF = 3s +;; +;; Max idle database connections on connection pool, default is 2 +;MAX_IDLE_CONNS = 2 +;; +;; Database connection max life time, default is 0 or 3s mysql (See #6804 & #7071 for reasoning) +;CONN_MAX_LIFETIME = 3s +;; +;; Database maximum number of open connections, default is 0 meaning no maximum +;MAX_OPEN_CONNS = 0 +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; [security] -; Whether the installer is disabled +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Whether the installer is disabled (set to true to disable the installer) INSTALL_LOCK = false -; !!CHANGE THIS TO KEEP YOUR USER DATA SAFE!! -SECRET_KEY = !#@FDEWREWR&*( -; How long to remember that an user is logged in before requiring relogin (in days) -LOGIN_REMEMBER_DAYS = 7 -COOKIE_USERNAME = gitea_awesome -COOKIE_REMEMBER_NAME = gitea_incredible -; Reverse proxy authentication header name of user name -REVERSE_PROXY_AUTHENTICATION_USER = X-WEBAUTH-USER -REVERSE_PROXY_AUTHENTICATION_EMAIL = X-WEBAUTH-EMAIL -; The minimum password length for new Users -MIN_PASSWORD_LENGTH = 6 -; Set to true to allow users to import local server paths -IMPORT_LOCAL_PATHS = false -; Set to true to prevent all users (including admin) from creating custom git hooks -DISABLE_GIT_HOOKS = false - -[openid] -; -; OpenID is an open, standard and decentralized authentication protocol. -; Your identity is the address of a webpage you provide, which describes -; how to prove you are in control of that page. -; -; For more info: https://en.wikipedia.org/wiki/OpenID -; -; Current implementation supports OpenID-2.0 -; -; Tested to work providers at the time of writing: -; - Any GNUSocial node (your.hostname.tld/username) -; - Any SimpleID provider (http://simpleid.koinic.net) -; - http://openid.org.cn/ -; - openid.stackexchange.com -; - login.launchpad.net -; - .livejournal.com -; -; Whether to allow signin in via OpenID -ENABLE_OPENID_SIGNIN = true -; Whether to allow registering via OpenID -; Do not include to rely on rhw DISABLE_REGISTRATION setting -;ENABLE_OPENID_SIGNUP = true -; Allowed URI patterns (POSIX regexp). -; Space separated. -; Only these would be allowed if non-blank. -; Example value: trusted.domain.org trusted.domain.net -WHITELISTED_URIS = -; Forbidden URI patterns (POSIX regexp). -; Space separated. -; Only used if WHITELISTED_URIS is blank. -; Example value: loadaverage.org/badguy stackexchange.com/.*spammer -BLACKLISTED_URIS = - -[service] -; Time limit to confirm account/email registration -ACTIVE_CODE_LIVE_MINUTES = 180 -; Time limit to perform the reset of a forgotten password -RESET_PASSWD_CODE_LIVE_MINUTES = 180 -; Whether a new user needs to confirm their email when registering. -REGISTER_EMAIL_CONFIRM = false -; List of domain names that are allowed to be used to register on a Gitea instance -; gitea.io,example.com -EMAIL_DOMAIN_WHITELIST= -; Disallow registration, only allow admins to create accounts. -DISABLE_REGISTRATION = false -; Allow registration only using third-party services, it works only when DISABLE_REGISTRATION is false -ALLOW_ONLY_EXTERNAL_REGISTRATION = false -; User must sign in to view anything. -REQUIRE_SIGNIN_VIEW = false -; Mail notification -ENABLE_NOTIFY_MAIL = false -; More detail: https://github.com/gogits/gogs/issues/165 -ENABLE_REVERSE_PROXY_AUTHENTICATION = false -ENABLE_REVERSE_PROXY_AUTO_REGISTRATION = false -ENABLE_REVERSE_PROXY_EMAIL = false -; Enable captcha validation for registration -ENABLE_CAPTCHA = false -; Type of captcha you want to use. Options: image, recaptcha -CAPTCHA_TYPE = image -; Enable recaptcha to use Google's recaptcha service -; Go to https://www.google.com/recaptcha/admin to sign up for a key -RECAPTCHA_SECRET = -RECAPTCHA_SITEKEY = -; Change this to use recaptcha.net or other recaptcha service -RECAPTCHA_URL = https://www.google.com/recaptcha/ -; Default value for KeepEmailPrivate -; Each new user will get the value of this setting copied into their profile -DEFAULT_KEEP_EMAIL_PRIVATE = false -; Default value for AllowCreateOrganization -; Every new user will have rights set to create organizations depending on this setting -DEFAULT_ALLOW_CREATE_ORGANIZATION = true -; Either "public", "limited" or "private", default is "public" -; Limited is for signed user only -; Private is only for member of the organization -; Public is for everyone -DEFAULT_ORG_VISIBILITY = public -; Default value for EnableDependencies -; Repositories will use dependencies by default depending on this setting -DEFAULT_ENABLE_DEPENDENCIES = true -; Enable heatmap on users profiles. -ENABLE_USER_HEATMAP = true -; Enable Timetracking -ENABLE_TIMETRACKING = true -; Default value for EnableTimetracking -; Repositories will use timetracking by default depending on this setting -DEFAULT_ENABLE_TIMETRACKING = true -; Default value for AllowOnlyContributorsToTrackTime -; Only users with write permissions can track time if this is true -DEFAULT_ALLOW_ONLY_CONTRIBUTORS_TO_TRACK_TIME = true -; Default value for the domain part of the user's email address in the git log -; if he has set KeepEmailPrivate to true. The user's email will be replaced with a -; concatenation of the user name in lower case, "@" and NO_REPLY_ADDRESS. -NO_REPLY_ADDRESS = noreply.example.org -; Show Registration button -SHOW_REGISTRATION_BUTTON = true -; Default value for AutoWatchNewRepos -; When adding a repo to a team or creating a new repo all team members will watch the -; repo automatically if enabled -AUTO_WATCH_NEW_REPOS = true - -[webhook] -; Hook task queue length, increase if webhook shooting starts hanging -QUEUE_LENGTH = 1000 -; Deliver timeout in seconds -DELIVER_TIMEOUT = 5 -; Allow insecure certification -SKIP_TLS_VERIFY = false -; Number of history information in each page -PAGING_NUM = 10 - -[mailer] -ENABLED = false -; Buffer length of channel, keep it as it is if you don't know what it is. -SEND_BUFFER_LEN = 100 -; Prefix displayed before subject in mail -SUBJECT_PREFIX = -; Mail server -; Gmail: smtp.gmail.com:587 -; QQ: smtp.qq.com:465 -; Note, if the port ends with "465", SMTPS will be used. Using STARTTLS on port 587 is recommended per RFC 6409. If the server supports STARTTLS it will always be used. -HOST = -; Disable HELO operation when hostnames are different. -DISABLE_HELO = -; Custom hostname for HELO operation, if no value is provided, one is retrieved from system. -HELO_HOSTNAME = -; Do not verify the certificate of the server. Only use this for self-signed certificates -SKIP_VERIFY = -; Use client certificate -USE_CERTIFICATE = false -CERT_FILE = custom/mailer/cert.pem -KEY_FILE = custom/mailer/key.pem -; Should SMTP connection use TLS -IS_TLS_ENABLED = false -; Mail from address, RFC 5322. This can be just an email address, or the `"Name" ` format -FROM = -; Mailer user name and password -USER = -; Use PASSWD = `your password` for quoting if you use special characters in the password. -PASSWD = -; Send mails as plain text -SEND_AS_PLAIN_TEXT = false -; Set Mailer Type (either SMTP, sendmail or dummy to just send to the log) -MAILER_TYPE = smtp -; Specify an alternative sendmail binary -SENDMAIL_PATH = sendmail -; Specify any extra sendmail arguments -SENDMAIL_ARGS = - -[cache] -; Either "memory", "redis", or "memcache", default is "memory" -ADAPTER = memory -; For "memory" only, GC interval in seconds, default is 60 -INTERVAL = 60 -; For "redis" and "memcache", connection host address -; redis: network=tcp,addr=:6379,password=macaron,db=0,pool_size=100,idle_timeout=180 -; memcache: `127.0.0.1:11211` -HOST = -; Time to keep items in cache if not used, default is 16 hours. -; Setting it to 0 disables caching -ITEM_TTL = 16h - -[session] -; Either "memory", "file", or "redis", default is "memory" -PROVIDER = memory -; Provider config options -; memory: doesn't have any config yet -; file: session file path, e.g. `data/sessions` -; redis: network=tcp,addr=:6379,password=macaron,db=0,pool_size=100,idle_timeout=180 -; mysql: go-sql-driver/mysql dsn config string, e.g. `root:password@/session_table` -PROVIDER_CONFIG = data/sessions -; Session cookie name -COOKIE_NAME = i_like_gitea -; If you use session in https only, default is false -COOKIE_SECURE = false -; Enable set cookie, default is true -ENABLE_SET_COOKIE = true -; Session GC time interval in seconds, default is 86400 (1 day) -GC_INTERVAL_TIME = 86400 -; Session life time in seconds, default is 86400 (1 day) -SESSION_LIFE_TIME = 86400 - -[picture] -AVATAR_UPLOAD_PATH = data/avatars -REPOSITORY_AVATAR_UPLOAD_PATH = data/repo-avatars -; How Gitea deals with missing repository avatars -; none = no avatar will be displayed; random = random avatar will be displayed; image = default image will be used -REPOSITORY_AVATAR_FALLBACK = none -REPOSITORY_AVATAR_FALLBACK_IMAGE = /img/repo_default.png -; Max Width and Height of uploaded avatars. -; This is to limit the amount of RAM used when resizing the image. -AVATAR_MAX_WIDTH = 4096 -AVATAR_MAX_HEIGHT = 3072 -; Maximum alloved file size for uploaded avatars. -; This is to limit the amount of RAM used when resizing the image. -AVATAR_MAX_FILE_SIZE = 1048576 -; Chinese users can choose "duoshuo" -; or a custom avatar source, like: http://cn.gravatar.com/avatar/ -GRAVATAR_SOURCE = gravatar -; This value will always be true in offline mode. -DISABLE_GRAVATAR = false -; Federated avatar lookup uses DNS to discover avatar associated -; with emails, see https://www.libravatar.org -; This value will always be false in offline mode or when Gravatar is disabled. -ENABLE_FEDERATED_AVATAR = false - -[attachment] -; Whether attachments are enabled. Defaults to `true` -ENABLED = true -; Path for attachments. Defaults to `data/attachments` -PATH = data/attachments -; One or more allowed types, e.g. image/jpeg|image/png -ALLOWED_TYPES = image/jpeg|image/png|application/zip|application/gzip -; Max size of each file. Defaults to 4MB -MAX_SIZE = 4 -; Max number of files per upload. Defaults to 5 -MAX_FILES = 5 - -[time] -; Specifies the format for fully outputted dates. Defaults to RFC1123 -; Special supported values are ANSIC, UnixDate, RubyDate, RFC822, RFC822Z, RFC850, RFC1123, RFC1123Z, RFC3339, RFC3339Nano, Kitchen, Stamp, StampMilli, StampMicro and StampNano -; For more information about the format see http://golang.org/pkg/time/#pkg-constants -FORMAT = - -[log] -ROOT_PATH = -; Either "console", "file", "conn", "smtp" or "database", default is "console" -; Use comma to separate multiple modes, e.g. "console, file" -MODE = console -; Buffer length of the channel, keep it as it is if you don't know what it is. -BUFFER_LEN = 10000 -REDIRECT_MACARON_LOG = false -MACARON = file -; Either "Trace", "Debug", "Info", "Warn", "Error", "Critical", default is "Info" -ROUTER_LOG_LEVEL = Info -ROUTER = console -ENABLE_ACCESS_LOG = false -ACCESS_LOG_TEMPLATE = {{.Ctx.RemoteAddr}} - {{.Identity}} {{.Start.Format "[02/Jan/2006:15:04:05 -0700]" }} "{{.Ctx.Req.Method}} {{.Ctx.Req.RequestURI}} {{.Ctx.Req.Proto}}" {{.ResponseWriter.Status}} {{.ResponseWriter.Size}} "{{.Ctx.Req.Referer}}\" \"{{.Ctx.Req.UserAgent}}" -ACCESS = file -; Either "Trace", "Debug", "Info", "Warn", "Error", "Critical", default is "Trace" -LEVEL = Info -; Either "Trace", "Debug", "Info", "Warn", "Error", "Critical", default is "None" -STACKTRACE_LEVEL = None - -; Generic log modes -[log.x] -FLAGS = stdflags -EXPRESSION = -PREFIX = -COLORIZE = false - -; For "console" mode only -[log.console] -LEVEL = -STDERR = false - -; For "file" mode only -[log.file] -LEVEL = -; Set the file_name for the logger. If this is a relative path this -; will be relative to ROOT_PATH -FILE_NAME = -; This enables automated log rotate(switch of following options), default is true -LOG_ROTATE = true -; Max number of lines in a single file, default is 1000000 -MAX_LINES = 1000000 -; Max size shift of a single file, default is 28 means 1 << 28, 256MB -MAX_SIZE_SHIFT = 28 -; Segment log daily, default is true -DAILY_ROTATE = true -; delete the log file after n days, default is 7 -MAX_DAYS = 7 -; compress logs with gzip -COMPRESS = true -; compression level see godoc for compress/gzip -COMPRESSION_LEVEL = -1 - -; For "conn" mode only -[log.conn] -LEVEL = -; Reconnect host for every single message, default is false -RECONNECT_ON_MSG = false -; Try to reconnect when connection is lost, default is false -RECONNECT = false -; Either "tcp", "unix" or "udp", default is "tcp" -PROTOCOL = tcp -; Host address -ADDR = - -; For "smtp" mode only -[log.smtp] -LEVEL = -; Name displayed in mail title, default is "Diagnostic message from server" -SUBJECT = Diagnostic message from server -; Mail server -HOST = -; Mailer user name and password -USER = -; Use PASSWD = `your password` for quoting if you use special characters in the password. -PASSWD = -; Receivers, can be one or more, e.g. 1@example.com,2@example.com -RECEIVERS = - -[cron] -; Enable running cron tasks periodically. -ENABLED = true -; Run cron tasks when Gitea starts. -RUN_AT_START = false - -; Update mirrors -[cron.update_mirrors] -SCHEDULE = @every 10m - -; Repository health check -[cron.repo_health_check] -SCHEDULE = @every 24h -TIMEOUT = 60s -; Arguments for command 'git fsck', e.g. "--unreachable --tags" -; see more on http://git-scm.com/docs/git-fsck -ARGS = - -; Check repository statistics -[cron.check_repo_stats] -RUN_AT_START = true -SCHEDULE = @every 24h - -; Clean up old repository archives -[cron.archive_cleanup] -; Whether to enable the job -ENABLED = true -; Whether to always run at least once at start up time (if ENABLED) -RUN_AT_START = true -; Time interval for job to run -SCHEDULE = @every 24h -; Archives created more than OLDER_THAN ago are subject to deletion -OLDER_THAN = 24h - -; Synchronize external user data (only LDAP user synchronization is supported) -[cron.sync_external_users] -; Synchronize external user data when starting server (default false) -RUN_AT_START = false -; Interval as a duration between each synchronization (default every 24h) -SCHEDULE = @every 24h -; Create new users, update existing user data and disable users that are not in external source anymore (default) -; or only create new users if UPDATE_EXISTING is set to false -UPDATE_EXISTING = true - -[git] -; Disables highlight of added and removed changes -DISABLE_DIFF_HIGHLIGHT = false -; Max number of lines allowed in a single file in diff view -MAX_GIT_DIFF_LINES = 1000 -; Max number of allowed characters in a line in diff view -MAX_GIT_DIFF_LINE_CHARACTERS = 5000 -; Max number of files shown in diff view -MAX_GIT_DIFF_FILES = 100 -; Arguments for command 'git gc', e.g. "--aggressive --auto" -; see more on http://git-scm.com/docs/git-gc/ -GC_ARGS = -; If use git wire protocol version 2 when git version >= 2.18, default is true, set to false when you always want git wire protocol version 1 -EnableAutoGitWireProtocol = true - -; Operation timeout in seconds -[git.timeout] -DEFAULT = 360 -MIGRATE = 600 -MIRROR = 300 -CLONE = 300 -PULL = 300 -GC = 60 - -[mirror] -; Default interval as a duration between each check -DEFAULT_INTERVAL = 8h -; Min interval as a duration must be > 1m -MIN_INTERVAL = 10m - -[api] -; Enables Swagger. True or false; default is true. -ENABLE_SWAGGER = true -; Max number of items in a page -MAX_RESPONSE_ITEMS = 50 -; Default paging number of api -DEFAULT_PAGING_NUM = 30 -; Default and maximum number of items per page for git trees api -DEFAULT_GIT_TREES_PER_PAGE = 1000 -; Default size of a blob returned by the blobs API (default is 10MiB) -DEFAULT_MAX_BLOB_SIZE = 10485760 +;; +;; Global secret key that will be used - if blank will be regenerated. +SECRET_KEY = +;; +;; Secret used to validate communication within Gitea binary. +INTERNAL_TOKEN= +;; +;; Instead of defining internal token in the configuration, this configuration option can be used to give Gitea a path to a file that contains the internal token (example value: file:/etc/gitea/internal_token) +;INTERNAL_TOKEN_URI = ;e.g. /etc/gitea/internal_token +;; +;; How long to remember that a user is logged in before requiring relogin (in days) +;LOGIN_REMEMBER_DAYS = 7 +;; +;; Name of the cookie used to store the current username. +;COOKIE_USERNAME = gitea_awesome +;; +;; Name of cookie used to store authentication information. +;COOKIE_REMEMBER_NAME = gitea_incredible +;; +;; Reverse proxy authentication header name of user name and email +;REVERSE_PROXY_AUTHENTICATION_USER = X-WEBAUTH-USER +;REVERSE_PROXY_AUTHENTICATION_EMAIL = X-WEBAUTH-EMAIL +;; +;; Interpret X-Forwarded-For header or the X-Real-IP header and set this as the remote IP for the request +;REVERSE_PROXY_LIMIT = 1 +;; +;; List of IP addresses and networks separated by comma of trusted proxy servers. Use `*` to trust all. +;REVERSE_PROXY_TRUSTED_PROXIES = 127.0.0.0/8,::1/128 +;; +;; The minimum password length for new Users +;MIN_PASSWORD_LENGTH = 6 +;; +;; Set to true to allow users to import local server paths +;IMPORT_LOCAL_PATHS = false +;; +;; Set to false to allow users with git hook privileges to create custom git hooks. +;; Custom git hooks can be used to perform arbitrary code execution on the host operating system. +;; This enables the users to access and modify this config file and the Gitea database and interrupt the Gitea service. +;; By modifying the Gitea database, users can gain Gitea administrator privileges. +;; It also enables them to access other resources available to the user on the operating system that is running the Gitea instance and perform arbitrary actions in the name of the Gitea OS user. +;; WARNING: This maybe harmful to you website or your operating system. +;DISABLE_GIT_HOOKS = true +;; +;; Set to true to disable webhooks feature. +;DISABLE_WEBHOOKS = false +;; +;; Set to false to allow pushes to gitea repositories despite having an incomplete environment - NOT RECOMMENDED +;ONLY_ALLOW_PUSH_IF_GITEA_ENVIRONMENT_SET = true +;; +;;Comma separated list of character classes required to pass minimum complexity. +;;If left empty or no valid values are specified, the default is off (no checking) +;;Classes include "lower,upper,digit,spec" +;PASSWORD_COMPLEXITY = off +;; +;; Password Hash algorithm, either "argon2", "pbkdf2", "scrypt" or "bcrypt" +;PASSWORD_HASH_ALGO = pbkdf2 +;; +;; Set false to allow JavaScript to read CSRF cookie +;CSRF_COOKIE_HTTP_ONLY = true +;; +;; Validate against https://haveibeenpwned.com/Passwords to see if a password has been exposed +;PASSWORD_CHECK_PWN = false +;; +;; Cache successful token hashes. API tokens are stored in the DB as pbkdf2 hashes however, this means that there is a potentially significant hashing load when there are multiple API operations. +;; This cache will store the successfully hashed tokens in a LRU cache as a balance between performance and security. +;SUCCESSFUL_TOKENS_CACHE_SIZE = 20 +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; [oauth2] -; Enables OAuth2 provider +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Enables OAuth2 provider ENABLE = true -; Lifetime of an OAuth2 access token in seconds -ACCESS_TOKEN_EXPIRATION_TIME=3600 -; Lifetime of an OAuth2 access token in hours -REFRESH_TOKEN_EXPIRATION_TIME=730 -; Check if refresh token got already used -INVALIDATE_REFRESH_TOKENS=false -; OAuth2 authentication secret for access and refresh tokens, change this a unique string. -JWT_SECRET=Bk0yK7Y9g_p56v86KaHqjSbxvNvu3SbKoOdOt2ZcXvU - -[i18n] -LANGS = en-US,zh-CN,zh-HK,zh-TW,de-DE,fr-FR,nl-NL,lv-LV,ru-RU,uk-UA,ja-JP,es-ES,pt-BR,pl-PL,bg-BG,it-IT,fi-FI,tr-TR,cs-CZ,sr-SP,sv-SE,ko-KR -NAMES = English,简体中文,繁體中文（香港）,繁體中文（台灣）,Deutsch,français,Nederlands,latviešu,русский,Українська,日本語,español,português do Brasil,polski,български,italiano,suomi,Türkçe,čeština,српски,svenska,한국어 - -; Used for datetimepicker -[i18n.datelang] -en-US = en -zh-CN = zh -zh-HK = zh-HK -zh-TW = zh-TW -de-DE = de -fr-FR = fr -nl-NL = nl -lv-LV = lv -ru-RU = ru -uk-UA = uk -ja-JP = ja -es-ES = es -pt-BR = pt-BR -pl-PL = pl -bg-BG = bg -it-IT = it -fi-FI = fi -tr-TR = tr -cs-CZ = cs-CZ -sr-SP = sr -sv-SE = sv -ko-KR = ko +;; +;; Algorithm used to sign OAuth2 tokens. Valid values: HS256, HS384, HS512, RS256, RS384, RS512, ES256, ES384, ES512, EdDSA +;JWT_SIGNING_ALGORITHM = RS256 +;; +;; Private key file path used to sign OAuth2 tokens. The path is relative to APP_DATA_PATH. +;; This setting is only needed if JWT_SIGNING_ALGORITHM is set to RS256, RS384, RS512, ES256, ES384 or ES512. +;; The file must contain a RSA or ECDSA private key in the PKCS8 format. If no key exists a 4096 bit key will be created for you. +;JWT_SIGNING_PRIVATE_KEY_FILE = jwt/private.pem +;; +;; OAuth2 authentication secret for access and refresh tokens, change this yourself to a unique string. CLI generate option is helpful in this case. https://docs.gitea.io/en-us/command-line/#generate +;; This setting is only needed if JWT_SIGNING_ALGORITHM is set to HS256, HS384 or HS512. +;JWT_SECRET = +;; +;; Lifetime of an OAuth2 access token in seconds +;ACCESS_TOKEN_EXPIRATION_TIME = 3600 +;; +;; Lifetime of an OAuth2 refresh token in hours +;REFRESH_TOKEN_EXPIRATION_TIME = 730 +;; +;; Check if refresh token got already used +;INVALIDATE_REFRESH_TOKENS = false +;; +;; Maximum length of oauth2 token/cookie stored on server +;MAX_TOKEN_LENGTH = 32767 +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; [U2F] -; NOTE: THE DEFAULT VALUES HERE WILL NEED TO BE CHANGED -; Two Factor authentication with security keys -; https://developers.yubico.com/U2F/App_ID.html -;APP_ID = http://localhost:3000/ -; Comma seperated list of trusted facets -;TRUSTED_FACETS = http://localhost:3000/ +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; NOTE: THE DEFAULT VALUES HERE WILL NEED TO BE CHANGED +;; Two Factor authentication with security keys +;; https://developers.yubico.com/U2F/App_ID.html +;; +;; DEPRECATED - this only applies to previously registered security keys using the U2F standard +APP_ID = ; e.g. http://localhost:3000/ -; Extension mapping to highlight class -; e.g. .toml=ini -[highlight.mapping] -[other] -SHOW_FOOTER_BRANDING = false -; Show version information about Gitea and Go in the footer -SHOW_FOOTER_VERSION = true -; Show template execution time in the footer -SHOW_FOOTER_TEMPLATE_LOAD_TIME = true +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +[log] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Root path for the log files - defaults to %(GITEA_WORK_DIR)/log +;ROOT_PATH = +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Main Logger +;; +;; Either "console", "file", "conn", "smtp" or "database", default is "console" +;; Use comma to separate multiple modes, e.g. "console, file" +MODE = console +;; +;; Either "Trace", "Debug", "Info", "Warn", "Error", "Critical", default is "Trace" +LEVEL = Info +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Router Logger +;; +;; Switch off the router log +;DISABLE_ROUTER_LOG= ; false +;; +;; Set the log "modes" for the router log (if file is set the log file will default to router.log) +ROUTER = console +;; +;; The level at which the router logs +;ROUTER_LOG_LEVEL = Info +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Access Logger (Creates log in NCSA common log format) +;; +;ENABLE_ACCESS_LOG = false +;; Set the log "modes" for the access log (if file is set the log file will default to access.log) +;ACCESS = file +;; +;; Sets the template used to create the access log. +;ACCESS_LOG_TEMPLATE = {{.Ctx.RemoteAddr}} - {{.Identity}} {{.Start.Format "[02/Jan/2006:15:04:05 -0700]" }} "{{.Ctx.Req.Method}} {{.Ctx.Req.URL.RequestURI}} {{.Ctx.Req.Proto}}" {{.ResponseWriter.Status}} {{.ResponseWriter.Size}} "{{.Ctx.Req.Referer}}\" \"{{.Ctx.Req.UserAgent}}" +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; SSH log (Creates log from ssh git request) +;; +;ENABLE_SSH_LOG = false +;; +;; Other Settings +;; +;; Print Stacktraces with logs. (Rarely helpful.) Either "Trace", "Debug", "Info", "Warn", "Error", "Critical", default is "None" +;STACKTRACE_LEVEL = None +;; +;; Buffer length of the channel, keep it as it is if you don't know what it is. +;BUFFER_LEN = 10000 -[markup.asciidoc] -ENABLED = false -; List of file extensions that should be rendered by an external command -FILE_EXTENSIONS = .adoc,.asciidoc -; External command to render all matching extensions -RENDER_COMMAND = "asciidoc --out-file=- -" -; Don't pass the file on STDIN, pass the filename as argument instead. -IS_INPUT_FILE = false +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Creating specific log configuration +;; +;; You can set specific configuration for individual modes and subloggers +;; +;; Configuration available to all log modes/subloggers +;LEVEL= +;FLAGS = stdflags +;EXPRESSION = +;PREFIX = +;COLORIZE = false +;; +;; For "console" mode only +;STDERR = false +;; +;; For "file" mode only +;LEVEL = +;; Set the file_name for the logger. If this is a relative path this +;; will be relative to ROOT_PATH +;FILE_NAME = +;; This enables automated log rotate(switch of following options), default is true +;LOG_ROTATE = true +;; Max size shift of a single file, default is 28 means 1 << 28, 256MB +;MAX_SIZE_SHIFT = 28 +;; Segment log daily, default is true +;DAILY_ROTATE = true +;; delete the log file after n days, default is 7 +;MAX_DAYS = 7 +;; compress logs with gzip +;COMPRESS = true +;; compression level see godoc for compress/gzip +;COMPRESSION_LEVEL = -1 +; +;; For "conn" mode only +;LEVEL = +;; Reconnect host for every single message, default is false +;RECONNECT_ON_MSG = false +;; Try to reconnect when connection is lost, default is false +;RECONNECT = false +;; Either "tcp", "unix" or "udp", default is "tcp" +;PROTOCOL = tcp +;; Host address +;ADDR = +; +;; For "smtp" mode only +;LEVEL = +;; Name displayed in mail title, default is "Diagnostic message from server" +;SUBJECT = Diagnostic message from server +;; Mail server +;HOST = +;; Mailer user name and password +;USER = +;; Use PASSWD = `your password` for quoting if you use special characters in the password. +;PASSWD = +;; Receivers, can be one or more, e.g. 1@example.com,2@example.com +;RECEIVERS = -[metrics] -; Enables metrics endpoint. True or false; default is false. -ENABLED = false -; If you want to add authorization, specify a token here -TOKEN = +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +[git] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; The path of git executable. If empty, Gitea searches through the PATH environment. +PATH = +;; +;; Disables highlight of added and removed changes +;DISABLE_DIFF_HIGHLIGHT = false +;; +;; Max number of lines allowed in a single file in diff view +;MAX_GIT_DIFF_LINES = 1000 +;; +;; Max number of allowed characters in a line in diff view +;MAX_GIT_DIFF_LINE_CHARACTERS = 5000 +;; +;; Max number of files shown in diff view +;MAX_GIT_DIFF_FILES = 100 +;; +;; Set the default commits range size +;COMMITS_RANGE_SIZE = 50 +;; +;; Set the default branches range size +;BRANCHES_RANGE_SIZE = 20 +;; +;; Arguments for command 'git gc', e.g. "--aggressive --auto" +;; see more on http://git-scm.com/docs/git-gc/ +;GC_ARGS = +;; +;; If use git wire protocol version 2 when git version >= 2.18, default is true, set to false when you always want git wire protocol version 1 +;ENABLE_AUTO_GIT_WIRE_PROTOCOL = true +;; +;; Respond to pushes to a non-default branch with a URL for creating a Pull Request (if the repository has them enabled) +;PULL_REQUEST_PUSH_MESSAGE = true +;; +;; (Go-Git only) Don't cache objects greater than this in memory. (Set to 0 to disable.) +;LARGE_OBJECT_THRESHOLD = 1048576 +;; Set to true to forcibly set core.protectNTFS=false +;DISABLE_CORE_PROTECT_NTFS=false +;; Disable the usage of using partial clones for git. +;DISABLE_PARTIAL_CLONE = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +[service] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Time limit to confirm account/email registration +;ACTIVE_CODE_LIVE_MINUTES = 180 +;; +;; Time limit to perform the reset of a forgotten password +;RESET_PASSWD_CODE_LIVE_MINUTES = 180 +;; +;; Whether a new user needs to confirm their email when registering. +;REGISTER_EMAIL_CONFIRM = false +;; +;; Whether a new user needs to be confirmed manually after registration. (Requires `REGISTER_EMAIL_CONFIRM` to be disabled.) +;REGISTER_MANUAL_CONFIRM = false +;; +;; List of domain names that are allowed to be used to register on a Gitea instance +;; gitea.io,example.com +;EMAIL_DOMAIN_WHITELIST = +;; +;; Comma-separated list of domain names that are not allowed to be used to register on a Gitea instance +;EMAIL_DOMAIN_BLOCKLIST = +;; +;; Disallow registration, only allow admins to create accounts. +;DISABLE_REGISTRATION = false +;; +;; Allow registration only using gitea itself, it works only when DISABLE_REGISTRATION is false +;ALLOW_ONLY_INTERNAL_REGISTRATION = false +;; +;; Allow registration only using third-party services, it works only when DISABLE_REGISTRATION is false +;ALLOW_ONLY_EXTERNAL_REGISTRATION = false +;; +;; User must sign in to view anything. +;REQUIRE_SIGNIN_VIEW = false +;; +;; Mail notification +;ENABLE_NOTIFY_MAIL = false +;; +;; This setting enables gitea to be signed in with HTTP BASIC Authentication using the user's password +;; If you set this to false you will not be able to access the tokens endpoints on the API with your password +;; Please note that setting this to false will not disable OAuth Basic or Basic authentication using a token +;ENABLE_BASIC_AUTHENTICATION = true +;; +;; More detail: https://github.com/gogits/gogs/issues/165 +;ENABLE_REVERSE_PROXY_AUTHENTICATION = false +;ENABLE_REVERSE_PROXY_AUTO_REGISTRATION = false +;ENABLE_REVERSE_PROXY_EMAIL = false +;; +;; Enable captcha validation for registration +;ENABLE_CAPTCHA = false +;; +;; Type of captcha you want to use. Options: image, recaptcha, hcaptcha +;CAPTCHA_TYPE = image +;; +;; Enable recaptcha to use Google's recaptcha service +;; Go to https://www.google.com/recaptcha/admin to sign up for a key +;RECAPTCHA_SECRET = +;RECAPTCHA_SITEKEY = +;; +;; For hCaptcha, create an account at https://accounts.hcaptcha.com/login to get your keys +;HCAPTCHA_SECRET = +;HCAPTCHA_SITEKEY = +;; +;; Change this to use recaptcha.net or other recaptcha service +;RECAPTCHA_URL = https://www.google.com/recaptcha/ +;; +;; Default value for KeepEmailPrivate +;; Each new user will get the value of this setting copied into their profile +;DEFAULT_KEEP_EMAIL_PRIVATE = false +;; +;; Default value for AllowCreateOrganization +;; Every new user will have rights set to create organizations depending on this setting +;DEFAULT_ALLOW_CREATE_ORGANIZATION = true +;; Default value for IsRestricted +;; Every new user will have restricted permissions depending on this setting +;DEFAULT_USER_IS_RESTRICTED = false +;; +;; Either "public", "limited" or "private", default is "public" +;; Limited is for users visible only to signed users +;; Private is for users visible only to members of their organizations +;; Public is for users visible for everyone +;DEFAULT_USER_VISIBILITY = public +;; +;; Set which visibility modes a user can have +;ALLOWED_USER_VISIBILITY_MODES = public,limited,private +;; +;; Either "public", "limited" or "private", default is "public" +;; Limited is for organizations visible only to signed users +;; Private is for organizations visible only to members of the organization +;; Public is for organizations visible to everyone +;DEFAULT_ORG_VISIBILITY = public +;; +;; Default value for DefaultOrgMemberVisible +;; True will make the membership of the users visible when added to the organisation +;DEFAULT_ORG_MEMBER_VISIBLE = false +;; +;; Default value for EnableDependencies +;; Repositories will use dependencies by default depending on this setting +;DEFAULT_ENABLE_DEPENDENCIES = true +;; +;; Dependencies can be added from any repository where the user is granted access or only from the current repository depending on this setting. +;ALLOW_CROSS_REPOSITORY_DEPENDENCIES = true +;; +;; Enable heatmap on users profiles. +;ENABLE_USER_HEATMAP = true +;; +;; Enable Timetracking +;ENABLE_TIMETRACKING = true +;; +;; Default value for EnableTimetracking +;; Repositories will use timetracking by default depending on this setting +;DEFAULT_ENABLE_TIMETRACKING = true +;; +;; Default value for AllowOnlyContributorsToTrackTime +;; Only users with write permissions can track time if this is true +;DEFAULT_ALLOW_ONLY_CONTRIBUTORS_TO_TRACK_TIME = true +;; +;; Value for the domain part of the user's email address in the git log if user +;; has set KeepEmailPrivate to true. The user's email will be replaced with a +;; concatenation of the user name in lower case, "@" and NO_REPLY_ADDRESS. Default +;; value is "noreply." + DOMAIN, where DOMAIN resolves to the value from server.DOMAIN +;; Note: do not use the notation below +;NO_REPLY_ADDRESS = ; noreply. +;; +;; Show Registration button +;SHOW_REGISTRATION_BUTTON = true +;; +;; Show milestones dashboard page - a view of all the user's milestones +;SHOW_MILESTONES_DASHBOARD_PAGE = true +;; +;; Default value for AutoWatchNewRepos +;; When adding a repo to a team or creating a new repo all team members will watch the +;; repo automatically if enabled +;AUTO_WATCH_NEW_REPOS = true +;; +;; Default value for AutoWatchOnChanges +;; Make the user watch a repository When they commit for the first time +;AUTO_WATCH_ON_CHANGES = false +;; +;; Minimum amount of time a user must exist before comments are kept when the user is deleted. +;USER_DELETE_WITH_COMMENTS_MAX_TIME = 0 +;; Valid site url schemes for user profiles +;VALID_SITE_URL_SCHEMES=http,https + + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Other Settings +;; +;; Uncomment the [section.header] if you wish to +;; set the below settings. +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Root path for storing all repository data. It must be an absolute path. By default, it is stored in a sub-directory of `APP_DATA_PATH`. +;ROOT = +;; +;; The script type this server supports. Usually this is `bash`, but some users report that only `sh` is available. +;SCRIPT_TYPE = bash +;; +;; DETECTED_CHARSETS_ORDER tie-break order for detected charsets. +;; If the charsets have equal confidence, tie-breaking will be done by order in this list +;; with charsets earlier in the list chosen in preference to those later. +;; Adding "defaults" will place the unused charsets at that position. +;DETECTED_CHARSETS_ORDER = UTF-8, UTF-16BE, UTF-16LE, UTF-32BE, UTF-32LE, ISO-8859, windows-1252, ISO-8859, windows-1250, ISO-8859, ISO-8859, ISO-8859, windows-1253, ISO-8859, windows-1255, ISO-8859, windows-1251, windows-1256, KOI8-R, ISO-8859, windows-1254, Shift_JIS, GB18030, EUC-JP, EUC-KR, Big5, ISO-2022, ISO-2022, ISO-2022, IBM424_rtl, IBM424_ltr, IBM420_rtl, IBM420_ltr +;; +;; Default ANSI charset to override non-UTF-8 charsets to +;ANSI_CHARSET = +;; +;; Force every new repository to be private +;FORCE_PRIVATE = false +;; +;; Default privacy setting when creating a new repository, allowed values: last, private, public. Default is last which means the last setting used. +;DEFAULT_PRIVATE = last +;; +;; Default private when using push-to-create +;DEFAULT_PUSH_CREATE_PRIVATE = true +;; +;; Global limit of repositories per user, applied at creation time. -1 means no limit +;MAX_CREATION_LIMIT = -1 +;; +;; Mirror sync queue length, increase if mirror syncing starts hanging (DEPRECATED: please use [queue.mirror] LENGTH instead) +;MIRROR_QUEUE_LENGTH = 1000 +;; +;; Patch test queue length, increase if pull request patch testing starts hanging (DEPRECATED: please use [queue.pr_patch_checker] LENGTH instead) +;PULL_REQUEST_QUEUE_LENGTH = 1000 +;; +;; Preferred Licenses to place at the top of the List +;; The name here must match the filename in options/license or custom/options/license +;PREFERRED_LICENSES = Apache License 2.0,MIT License +;; +;; Disable the ability to interact with repositories using the HTTP protocol +;DISABLE_HTTP_GIT = false +;; +;; Value for Access-Control-Allow-Origin header, default is not to present +;; WARNING: This may be harmful to your website if you do not give it a right value. +;ACCESS_CONTROL_ALLOW_ORIGIN = +;; +;; Force ssh:// clone url instead of scp-style uri when default SSH port is used +;USE_COMPAT_SSH_URI = false +;; +;; Close issues as long as a commit on any branch marks it as fixed +;; Comma separated list of globally disabled repo units. Allowed values: repo.issues, repo.ext_issues, repo.pulls, repo.wiki, repo.ext_wiki +;DISABLED_REPO_UNITS = +;; +;; Comma separated list of default repo units. Allowed values: repo.code, repo.releases, repo.issues, repo.pulls, repo.wiki, repo.projects. +;; Note: Code and Releases can currently not be deactivated. If you specify default repo units you should still list them for future compatibility. +;; External wiki and issue tracker can't be enabled by default as it requires additional settings. +;; Disabled repo units will not be added to new repositories regardless if it is in the default list. +;DEFAULT_REPO_UNITS = repo.code,repo.releases,repo.issues,repo.pulls,repo.wiki,repo.projects +;; +;; Prefix archive files by placing them in a directory named after the repository +;PREFIX_ARCHIVE_FILES = true +;; +;; Disable migrating feature. +;DISABLE_MIGRATIONS = false +;; +;; Disable stars feature. +;DISABLE_STARS = false +;; +;; The default branch name of new repositories +;DEFAULT_BRANCH = master +;; +;; Allow adoption of unadopted repositories +;ALLOW_ADOPTION_OF_UNADOPTED_REPOSITORIES = false +;; +;; Allow deletion of unadopted repositories +;ALLOW_DELETION_OF_UNADOPTED_REPOSITORIES = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.editor] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; List of file extensions for which lines should be wrapped in the Monaco editor +;; Separate extensions with a comma. To line wrap files without an extension, just put a comma +;LINE_WRAP_EXTENSIONS = .txt,.md,.markdown,.mdown,.mkd, +;; +;; Valid file modes that have a preview API associated with them, such as api/v1/markdown +;; Separate the values by commas. The preview tab in edit mode won't be displayed if the file extension doesn't match +;PREVIEWABLE_FILE_MODES = markdown + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.local] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Path for local repository copy. Defaults to `tmp/local-repo` +;LOCAL_COPY_PATH = tmp/local-repo + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.upload] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Whether repository file uploads are enabled. Defaults to `true` +;ENABLED = true +;; +;; Path for uploads. Defaults to `data/tmp/uploads` (tmp gets deleted on gitea restart) +;TEMP_PATH = data/tmp/uploads +;; +;; Comma-separated list of allowed file extensions (`.zip`), mime types (`text/plain`) or wildcard type (`image/*`, `audio/*`, `video/*`). Empty value or `*/*` allows all types. +;ALLOWED_TYPES = +;; +;; Max size of each file in megabytes. Defaults to 3MB +;FILE_MAX_SIZE = 3 +;; +;; Max number of files per upload. Defaults to 5 +;MAX_FILES = 5 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.pull-request] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; List of prefixes used in Pull Request title to mark them as Work In Progress +;WORK_IN_PROGRESS_PREFIXES = WIP:,[WIP] +;; +;; List of keywords used in Pull Request comments to automatically close a related issue +;CLOSE_KEYWORDS = close,closes,closed,fix,fixes,fixed,resolve,resolves,resolved +;; +;; List of keywords used in Pull Request comments to automatically reopen a related issue +;REOPEN_KEYWORDS = reopen,reopens,reopened +;; +;; In the default merge message for squash commits include at most this many commits +;DEFAULT_MERGE_MESSAGE_COMMITS_LIMIT = 50 +;; +;; In the default merge message for squash commits limit the size of the commit messages to this +;DEFAULT_MERGE_MESSAGE_SIZE = 5120 +;; +;; In the default merge message for squash commits walk all commits to include all authors in the Co-authored-by otherwise just use those in the limited list +;DEFAULT_MERGE_MESSAGE_ALL_AUTHORS = false +;; +;; In default merge messages limit the number of approvers listed as Reviewed-by: to this many +;DEFAULT_MERGE_MESSAGE_MAX_APPROVERS = 10 +;; +;; In default merge messages only include approvers who are official +;DEFAULT_MERGE_MESSAGE_OFFICIAL_APPROVERS_ONLY = true +;; +;; Add co-authored-by and co-committed-by trailers if committer does not match author +;ADD_CO_COMMITTER_TRAILERS = true + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.issue] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; List of reasons why a Pull Request or Issue can be locked +;LOCK_REASONS = Too heated,Off-topic,Resolved,Spam + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.release] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Comma-separated list of allowed file extensions (`.zip`), mime types (`text/plain`) or wildcard type (`image/*`, `audio/*`, `video/*`). Empty value or `*/*` allows all types. +;ALLOWED_TYPES = +;DEFAULT_PAGING_NUM = 10 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.signing] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; GPG key to use to sign commits, Defaults to the default - that is the value of git config --get user.signingkey +;; run in the context of the RUN_USER +;; Switch to none to stop signing completely +;SIGNING_KEY = default +;; +;; If a SIGNING_KEY ID is provided and is not set to default, use the provided Name and Email address as the signer. +;; These should match a publicized name and email address for the key. (When SIGNING_KEY is default these are set to +;; the results of git config --get user.name and git config --get user.email respectively and can only be overridden +;; by setting the SIGNING_KEY ID to the correct ID.) +;SIGNING_NAME = +;SIGNING_EMAIL = +;; +;; Sets the default trust model for repositories. Options are: collaborator, committer, collaboratorcommitter +;DEFAULT_TRUST_MODEL = collaborator +;; +;; Determines when gitea should sign the initial commit when creating a repository +;; Either: +;; - never +;; - pubkey: only sign if the user has a pubkey +;; - twofa: only sign if the user has logged in with twofa +;; - always +;; options other than none and always can be combined as comma separated list +;INITIAL_COMMIT = always +;; +;; Determines when to sign for CRUD actions +;; - as above +;; - parentsigned: requires that the parent commit is signed. +;CRUD_ACTIONS = pubkey, twofa, parentsigned +;; Determines when to sign Wiki commits +;; - as above +;WIKI = never +;; +;; Determines when to sign on merges +;; - basesigned: require that the parent of commit on the base repo is signed. +;; - commitssigned: require that all the commits in the head branch are signed. +;; - approved: only sign when merging an approved pr to a protected branch +;MERGES = pubkey, twofa, basesigned, commitssigned + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[repository.mimetype_mapping] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Custom MIME type mapping for downloadable files +;.apk=application/vnd.android.package-archive + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[project] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Default templates for project boards +;PROJECT_BOARD_BASIC_KANBAN_TYPE = To Do, In Progress, Done +;PROJECT_BOARD_BUG_TRIAGE_TYPE = Needs Triage, High Priority, Low Priority, Closed + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cors] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; More information about CORS can be found here: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#The_HTTP_response_headers +;; enable cors headers (disabled by default) +;ENABLED = false +;; +;; scheme of allowed requests +;SCHEME = http +;; +;; list of requesting domains that are allowed +;ALLOW_DOMAIN = * +;; +;; allow subdomains of headers listed above to request +;ALLOW_SUBDOMAIN = false +;; +;; list of methods allowed to request +;METHODS = GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS +;; +;; max time to cache response +;MAX_AGE = 10m +;; +;; allow request with credentials +;ALLOW_CREDENTIALS = false +;; +;; set X-FRAME-OPTIONS header +;X_FRAME_OPTIONS = SAMEORIGIN + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Number of repositories that are displayed on one explore page +;EXPLORE_PAGING_NUM = 20 +;; +;; Number of issues that are displayed on one page +;ISSUE_PAGING_NUM = 10 +;; +;; Number of maximum commits displayed in one activity feed +;FEED_MAX_COMMIT_NUM = 5 +;; +;; Number of items that are displayed in home feed +;FEED_PAGING_NUM = 20 +;; +;; Number of maximum commits displayed in commit graph. +;GRAPH_MAX_COMMIT_NUM = 100 +;; +;; Number of line of codes shown for a code comment +;CODE_COMMENT_LINES = 4 +;; +;; Value of `theme-color` meta tag, used by Android >= 5.0 +;; An invalid color like "none" or "disable" will have the default style +;; More info: https://developers.google.com/web/updates/2014/11/Support-for-theme-color-in-Chrome-39-for-Android +;THEME_COLOR_META_TAG = `#6cc644` +;; +;; Max size of files to be displayed (default is 8MiB) +;MAX_DISPLAY_FILE_SIZE = 8388608 +;; +;; Whether the email of the user should be shown in the Explore Users page +;SHOW_USER_EMAIL = true +;; +;; Set the default theme for the Gitea install +;DEFAULT_THEME = auto +;; +;; All available themes. Allow users select personalized themes regardless of the value of `DEFAULT_THEME`. +;THEMES = auto,gitea,arc-green +;; +;; All available reactions users can choose on issues/prs and comments. +;; Values can be emoji alias (:smile:) or a unicode emoji. +;; For custom reactions, add a tightly cropped square image to public/img/emoji/reaction_name.png +;REACTIONS = +1, -1, laugh, hooray, confused, heart, rocket, eyes +;; +;; Additional Emojis not defined in the utf8 standard +;; By default we support gitea (:gitea:), to add more copy them to public/img/emoji/emoji_name.png and add it to this config. +;; Dont mistake it for Reactions. +;CUSTOM_EMOJIS = gitea, codeberg, gitlab, git, github, gogs +;; +;; Whether the full name of the users should be shown where possible. If the full name isn't set, the username will be used. +;DEFAULT_SHOW_FULL_NAME = false +;; +;; Whether to search within description at repository search on explore page. +;SEARCH_REPO_DESCRIPTION = true +;; +;; Whether to enable a Service Worker to cache frontend assets +;USE_SERVICE_WORKER = true + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui.admin] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Number of users that are displayed on one page +;USER_PAGING_NUM = 50 +;; +;; Number of repos that are displayed on one page +;REPO_PAGING_NUM = 50 +;; +;; Number of notices that are displayed on one page +;NOTICE_PAGING_NUM = 25 +;; +;; Number of organizations that are displayed on one page +;ORG_PAGING_NUM = 50 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui.user] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Number of repos that are displayed on one page +;REPO_PAGING_NUM = 15 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui.meta] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;AUTHOR = Gitea - Git with a cup of tea +;DESCRIPTION = Gitea (Git with a cup of tea) is a painless self-hosted Git service written in Go +;KEYWORDS = go,git,self-hosted,gitea + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui.notification] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Control how often the notification endpoint is polled to update the notification +;; The timeout will increase to MAX_TIMEOUT in TIMEOUT_STEPs if the notification count is unchanged +;; Set MIN_TIMEOUT to 0 to turn off +;MIN_TIMEOUT = 10s +;MAX_TIMEOUT = 60s +;TIMEOUT_STEP = 10s +;; +;; This setting determines how often the db is queried to get the latest notification counts. +;; If the browser client supports EventSource and SharedWorker, a SharedWorker will be used in preference to polling notification. Set to -1 to disable the EventSource +;EVENT_SOURCE_UPDATE_TIME = 10s + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui.svg] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Whether to render SVG files as images. If SVG rendering is disabled, SVG files are displayed as text and cannot be embedded in markdown files as images. +;ENABLE_RENDER = true + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ui.csv] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Maximum allowed file size in bytes to render CSV files as table. (Set to 0 for no limit). +;MAX_FILE_SIZE = 524288 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[markdown] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Render soft line breaks as hard line breaks, which means a single newline character between +;; paragraphs will cause a line break and adding trailing whitespace to paragraphs is not +;; necessary to force a line break. +;; Render soft line breaks as hard line breaks for comments +;ENABLE_HARD_LINE_BREAK_IN_COMMENTS = true +;; +;; Render soft line breaks as hard line breaks for markdown documents +;ENABLE_HARD_LINE_BREAK_IN_DOCUMENTS = false +;; +;; Comma separated list of custom URL-Schemes that are allowed as links when rendering Markdown +;; for example git,magnet,ftp (more at https://en.wikipedia.org/wiki/List_of_URI_schemes) +;; URLs starting with http and https are always displayed, whatever is put in this entry. +;CUSTOM_URL_SCHEMES = +;; +;; List of file extensions that should be rendered/edited as Markdown +;; Separate the extensions with a comma. To render files without any extension as markdown, just put a comma +;FILE_EXTENSIONS = .md,.markdown,.mdown,.mkd + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[ssh.minimum_key_sizes] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Define allowed algorithms and their minimum key length (use -1 to disable a type) +;ED25519 = 256 +;ECDSA = 256 +;RSA = 2048 +;DSA = -1 ; set to 1024 to switch on + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[indexer] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Issue Indexer settings +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Issue indexer type, currently support: bleve, db or elasticsearch, default is bleve +;ISSUE_INDEXER_TYPE = bleve +;; +;; Issue indexer storage path, available when ISSUE_INDEXER_TYPE is bleve +;ISSUE_INDEXER_PATH = indexers/issues.bleve +;; +;; Issue indexer connection string, available when ISSUE_INDEXER_TYPE is elasticsearch +;ISSUE_INDEXER_CONN_STR = http://elastic:changeme@localhost:9200 +;; +;; Issue indexer name, available when ISSUE_INDEXER_TYPE is elasticsearch +;ISSUE_INDEXER_NAME = gitea_issues +;; +;; Timeout the indexer if it takes longer than this to start. +;; Set to zero to disable timeout. +;STARTUP_TIMEOUT = 30s +;; +;; Issue indexer queue, currently support: channel, levelqueue or redis, default is levelqueue (deprecated - use [queue.issue_indexer]) +;ISSUE_INDEXER_QUEUE_TYPE = levelqueue; **DEPRECATED** use settings in `[queue.issue_indexer]`. +;; +;; When ISSUE_INDEXER_QUEUE_TYPE is levelqueue, this will be the path where the queue will be saved. +;; This can be overridden by `ISSUE_INDEXER_QUEUE_CONN_STR`. +;; default is queues/common +;ISSUE_INDEXER_QUEUE_DIR = queues/common; **DEPRECATED** use settings in `[queue.issue_indexer]`. +;; +;; When `ISSUE_INDEXER_QUEUE_TYPE` is `redis`, this will store the redis connection string. +;; When `ISSUE_INDEXER_QUEUE_TYPE` is `levelqueue`, this is a directory or additional options of +;; the form `leveldb://path/to/db?option=value&....`, and overrides `ISSUE_INDEXER_QUEUE_DIR`. +;ISSUE_INDEXER_QUEUE_CONN_STR = "addrs=127.0.0.1:6379 db=0"; **DEPRECATED** use settings in `[queue.issue_indexer]`. +;; +;; Batch queue number, default is 20 +;ISSUE_INDEXER_QUEUE_BATCH_NUMBER = 20; **DEPRECATED** use settings in `[queue.issue_indexer]`. + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Repository Indexer settings +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; repo indexer by default disabled, since it uses a lot of disk space +;REPO_INDEXER_ENABLED = false +;; +;; Code search engine type, could be `bleve` or `elasticsearch`. +;REPO_INDEXER_TYPE = bleve +;; +;; Index file used for code search. available when `REPO_INDEXER_TYPE` is bleve +;REPO_INDEXER_PATH = indexers/repos.bleve +;; +;; Code indexer connection string, available when `REPO_INDEXER_TYPE` is elasticsearch. i.e. http://elastic:changeme@localhost:9200 +;REPO_INDEXER_CONN_STR = +;; +;; Code indexer name, available when `REPO_INDEXER_TYPE` is elasticsearch +;REPO_INDEXER_NAME = gitea_codes +;; +;; A comma separated list of glob patterns (see https://github.com/gobwas/glob) to include +;; in the index; default is empty +;REPO_INDEXER_INCLUDE = +;; +;; A comma separated list of glob patterns to exclude from the index; ; default is empty +;REPO_INDEXER_EXCLUDE = +;; +;; +;UPDATE_BUFFER_LEN = 20; **DEPRECATED** use settings in `[queue.issue_indexer]`. +;MAX_FILE_SIZE = 1048576 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[queue] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Specific queues can be individually configured with [queue.name]. [queue] provides defaults +;; ([queue.issue_indexer] is special due to the old configuration described above) +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; General queue queue type, currently support: persistable-channel, channel, level, redis, dummy +;; default to persistable-channel +;TYPE = persistable-channel +;; +;; data-dir for storing persistable queues and level queues, individual queues will default to `queues/common` meaning the queue is shared. +;DATADIR = queues/ +;; +;; Default queue length before a channel queue will block +;LENGTH = 20 +;; +;; Batch size to send for batched queues +;BATCH_LENGTH = 20 +;; +;; Connection string for redis queues this will store the redis connection string. +;; When `TYPE` is `persistable-channel`, this provides a directory for the underlying leveldb +;; or additional options of the form `leveldb://path/to/db?option=value&....`, and will override `DATADIR`. +;CONN_STR = "addrs=127.0.0.1:6379 db=0" +;; +;; Provides the suffix of the default redis/disk queue name - specific queues can be overridden within in their [queue.name] sections. +;QUEUE_NAME = "_queue" +;; +;; Provides the suffix of the default redis/disk unique queue set name - specific queues can be overridden within in their [queue.name] sections. +;SET_NAME = "_unique" +;; +;; If the queue cannot be created at startup - level queues may need a timeout at startup - wrap the queue: +;WRAP_IF_NECESSARY = true +;; +;; Attempt to create the wrapped queue at max +;MAX_ATTEMPTS = 10 +;; +;; Timeout queue creation +;TIMEOUT = 15m30s +;; +;; Create a pool with this many workers +;WORKERS = 0 +;; +;; Dynamically scale the worker pool to at this many workers +;MAX_WORKERS = 10 +;; +;; Add boost workers when the queue blocks for BLOCK_TIMEOUT +;BLOCK_TIMEOUT = 1s +;; +;; Remove the boost workers after BOOST_TIMEOUT +;BOOST_TIMEOUT = 5m +;; +;; During a boost add BOOST_WORKERS +;BOOST_WORKERS = 1 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[admin] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Disallow regular (non-admin) users from creating organizations. +;DISABLE_REGULAR_ORG_CREATION = false +;; +;; Default configuration for email notifications for users (user configurable). Options: enabled, onmention, disabled +;DEFAULT_EMAIL_NOTIFICATIONS = enabled + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[openid] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; OpenID is an open, standard and decentralized authentication protocol. +;; Your identity is the address of a webpage you provide, which describes +;; how to prove you are in control of that page. +;; +;; For more info: https://en.wikipedia.org/wiki/OpenID +;; +;; Current implementation supports OpenID-2.0 +;; +;; Tested to work providers at the time of writing: +;; - Any GNUSocial node (your.hostname.tld/username) +;; - Any SimpleID provider (http://simpleid.koinic.net) +;; - http://openid.org.cn/ +;; - openid.stackexchange.com +;; - login.launchpad.net +;; - .livejournal.com +;; +;; Whether to allow signin in via OpenID +;ENABLE_OPENID_SIGNIN = true +;; +;; Whether to allow registering via OpenID +;; Do not include to rely on rhw DISABLE_REGISTRATION setting +;;ENABLE_OPENID_SIGNUP = true +;; +;; Allowed URI patterns (POSIX regexp). +;; Space separated. +;; Only these would be allowed if non-blank. +;; Example value: trusted.domain.org trusted.domain.net +;WHITELISTED_URIS = +;; +;; Forbidden URI patterns (POSIX regexp). +;; Space separated. +;; Only used if WHITELISTED_URIS is blank. +;; Example value: loadaverage.org/badguy stackexchange.com/.*spammer +;BLACKLISTED_URIS = + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[oauth2_client] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Whether a new auto registered oauth2 user needs to confirm their email. +;; Do not include to use the REGISTER_EMAIL_CONFIRM setting from the `[service]` section. +;REGISTER_EMAIL_CONFIRM = +;; +;; Scopes for the openid connect oauth2 provider (separated by space, the openid scope is implicitly added). +;; Typical values are profile and email. +;; For more information about the possible values see https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims +;OPENID_CONNECT_SCOPES = +;; +;; Automatically create user accounts for new oauth2 users. +;ENABLE_AUTO_REGISTRATION = false +;; +;; The source of the username for new oauth2 accounts: +;; userid = use the userid / sub attribute +;; nickname = use the nickname attribute +;; email = use the username part of the email attribute +;USERNAME = nickname +;; +;; Update avatar if available from oauth2 provider. +;; Update will be performed on each login. +;UPDATE_AVATAR = false +;; +;; How to handle if an account / email already exists: +;; disabled = show an error +;; login = show an account linking login +;; auto = link directly with the account +;ACCOUNT_LINKING = login + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[webhook] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Hook task queue length, increase if webhook shooting starts hanging +;QUEUE_LENGTH = 1000 +;; +;; Deliver timeout in seconds +;DELIVER_TIMEOUT = 5 +;; +;; Webhook can only call allowed hosts for security reasons. Comma separated list, eg: external, 192.168.1.0/24, *.mydomain.com +;; Built-in: loopback (for localhost), private (for LAN/intranet), external (for public hosts on internet), * (for all hosts) +;; CIDR list: 1.2.3.0/8, 2001:db8::/32 +;; Wildcard hosts: *.mydomain.com, 192.168.100.* +;; Since 1.15.7. Default to * for 1.15.x, external for 1.16 and later +;ALLOWED_HOST_LIST = external +;; +;; Allow insecure certification +;SKIP_TLS_VERIFY = false +;; +;; Number of history information in each page +;PAGING_NUM = 10 +;; +;; Proxy server URL, support http://, https//, socks://, blank will follow environment http_proxy/https_proxy +;PROXY_URL = +;; +;; Comma separated list of host names requiring proxy. Glob patterns (*) are accepted; use ** to match all hosts. +;PROXY_HOSTS = + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[mailer] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;ENABLED = false +;; +;; Buffer length of channel, keep it as it is if you don't know what it is. +;SEND_BUFFER_LEN = 100 +;; +;; Prefix displayed before subject in mail +;SUBJECT_PREFIX = +;; +;; Mail server +;; Gmail: smtp.gmail.com:587 +;; QQ: smtp.qq.com:465 +;; As per RFC 8314 using Implicit TLS/SMTPS on port 465 (if supported) is recommended, +;; otherwise STARTTLS on port 587 should be used. +;HOST = +;; +;; Disable HELO operation when hostnames are different. +;DISABLE_HELO = +;; +;; Custom hostname for HELO operation, if no value is provided, one is retrieved from system. +;HELO_HOSTNAME = +;; +;; Whether or not to skip verification of certificates; `true` to disable verification. This option is unsafe. Consider adding the certificate to the system trust store instead. +;SKIP_VERIFY = false +;; +;; Use client certificate +;USE_CERTIFICATE = false +;CERT_FILE = custom/mailer/cert.pem +;KEY_FILE = custom/mailer/key.pem +;; +;; Should SMTP connect with TLS, (if port ends with 465 TLS will always be used.) +;; If this is false but STARTTLS is supported the connection will be upgraded to TLS opportunistically. +;IS_TLS_ENABLED = false +;; +;; Mail from address, RFC 5322. This can be just an email address, or the `"Name" ` format +;FROM = +;; +;; Sometimes it is helpful to use a different address on the envelope. Set this to use ENVELOPE_FROM as the from on the envelope. Set to `<>` to send an empty address. +;ENVELOPE_FROM = +;; +;; Mailer user name and password +;; Please Note: Authentication is only supported when the SMTP server communication is encrypted with TLS (this can be via STARTTLS) or `HOST=localhost`. +;USER = +;; +;; Use PASSWD = `your password` for quoting if you use special characters in the password. +;PASSWD = +;; +;; Send mails as plain text +;SEND_AS_PLAIN_TEXT = false +;; +;; Set Mailer Type (either SMTP, sendmail or dummy to just send to the log) +;MAILER_TYPE = smtp +;; +;; Specify an alternative sendmail binary +;SENDMAIL_PATH = sendmail +;; +;; Specify any extra sendmail arguments +;SENDMAIL_ARGS = +;; +;; Timeout for Sendmail +;SENDMAIL_TIMEOUT = 5m +;; +;; convert \r\n to \n for Sendmail +;SENDMAIL_CONVERT_CRLF = true + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cache] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; if the cache enabled +;ENABLED = true +;; +;; Either "memory", "redis", "memcache", or "twoqueue". default is "memory" +;ADAPTER = memory +;; +;; For "memory" only, GC interval in seconds, default is 60 +;INTERVAL = 60 +;; +;; For "redis" and "memcache", connection host address +;; redis: network=tcp,addr=:6379,password=macaron,db=0,pool_size=100,idle_timeout=180 +;; memcache: `127.0.0.1:11211` +;; twoqueue: `{"size":50000,"recent_ratio":0.25,"ghost_ratio":0.5}` or `50000` +;HOST = +;; +;; Time to keep items in cache if not used, default is 16 hours. +;; Setting it to 0 disables caching +;ITEM_TTL = 16h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Last commit cache +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cache.last_commit] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; if the cache enabled +;ENABLED = true +;; +;; Time to keep items in cache if not used, default is 8760 hours. +;; Setting it to 0 disables caching +;ITEM_TTL = 8760h +;; +;; Only enable the cache when repository's commits count great than +;COMMITS_COUNT = 1000 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[session] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Either "memory", "file", or "redis", default is "memory" +;PROVIDER = memory +;; +;; Provider config options +;; memory: doesn't have any config yet +;; file: session file path, e.g. `data/sessions` +;; redis: network=tcp,addr=:6379,password=macaron,db=0,pool_size=100,idle_timeout=180 +;; mysql: go-sql-driver/mysql dsn config string, e.g. `root:password@/session_table` +;PROVIDER_CONFIG = data/sessions +;; +;; Session cookie name +;COOKIE_NAME = i_like_gitea +;; +;; If you use session in https only, default is false +;COOKIE_SECURE = false +;; +;; Session GC time interval in seconds, default is 86400 (1 day) +;GC_INTERVAL_TIME = 86400 +;; +;; Session life time in seconds, default is 86400 (1 day) +;SESSION_LIFE_TIME = 86400 +;; +;; SameSite settings. Either "none", "lax", or "strict" +;SAME_SITE=lax + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[picture] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;AVATAR_UPLOAD_PATH = data/avatars +;REPOSITORY_AVATAR_UPLOAD_PATH = data/repo-avatars +;; +;; How Gitea deals with missing repository avatars +;; none = no avatar will be displayed; random = random avatar will be displayed; image = default image will be used +;REPOSITORY_AVATAR_FALLBACK = none +;REPOSITORY_AVATAR_FALLBACK_IMAGE = /img/repo_default.png +;; +;; Max Width and Height of uploaded avatars. +;; This is to limit the amount of RAM used when resizing the image. +;AVATAR_MAX_WIDTH = 4096 +;AVATAR_MAX_HEIGHT = 3072 +;; +;; The multiplication factor for rendered avatar images. +;; Larger values result in finer rendering on HiDPI devices. +;AVATAR_RENDERED_SIZE_FACTOR = 3 +;; +;; Maximum allowed file size for uploaded avatars. +;; This is to limit the amount of RAM used when resizing the image. +;AVATAR_MAX_FILE_SIZE = 1048576 +;; +;; Chinese users can choose "duoshuo" +;; or a custom avatar source, like: http://cn.gravatar.com/avatar/ +;GRAVATAR_SOURCE = gravatar +;; +;; This value will always be true in offline mode. +;DISABLE_GRAVATAR = false +;; +;; Federated avatar lookup uses DNS to discover avatar associated +;; with emails, see https://www.libravatar.org +;; This value will always be false in offline mode or when Gravatar is disabled. +;ENABLE_FEDERATED_AVATAR = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[attachment] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Whether issue and pull request attachments are enabled. Defaults to `true` +;ENABLED = true +;; +;; Comma-separated list of allowed file extensions (`.zip`), mime types (`text/plain`) or wildcard type (`image/*`, `audio/*`, `video/*`). Empty value or `*/*` allows all types. +;ALLOWED_TYPES = .docx,.gif,.gz,.jpeg,.jpg,.mp4,.log,.pdf,.png,.pptx,.txt,.xlsx,.zip +;; +;; Max size of each file. Defaults to 4MB +;MAX_SIZE = 4 +;; +;; Max number of files per upload. Defaults to 5 +;MAX_FILES = 5 +;; +;; Storage type for attachments, `local` for local disk or `minio` for s3 compatible +;; object storage service, default is `local`. +;STORAGE_TYPE = local +;; +;; Allows the storage driver to redirect to authenticated URLs to serve files directly +;; Currently, only `minio` is supported. +;SERVE_DIRECT = false +;; +;; Path for attachments. Defaults to `data/attachments` only available when STORAGE_TYPE is `local` +;PATH = data/attachments +;; +;; Minio endpoint to connect only available when STORAGE_TYPE is `minio` +;MINIO_ENDPOINT = localhost:9000 +;; +;; Minio accessKeyID to connect only available when STORAGE_TYPE is `minio` +;MINIO_ACCESS_KEY_ID = +;; +;; Minio secretAccessKey to connect only available when STORAGE_TYPE is `minio` +;MINIO_SECRET_ACCESS_KEY = +;; +;; Minio bucket to store the attachments only available when STORAGE_TYPE is `minio` +;MINIO_BUCKET = gitea +;; +;; Minio location to create bucket only available when STORAGE_TYPE is `minio` +;MINIO_LOCATION = us-east-1 +;; +;; Minio base path on the bucket only available when STORAGE_TYPE is `minio` +;MINIO_BASE_PATH = attachments/ +;; +;; Minio enabled ssl only available when STORAGE_TYPE is `minio` +;MINIO_USE_SSL = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[time] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Specifies the format for fully outputted dates. Defaults to RFC1123 +;; Special supported values are ANSIC, UnixDate, RubyDate, RFC822, RFC822Z, RFC850, RFC1123, RFC1123Z, RFC3339, RFC3339Nano, Kitchen, Stamp, StampMilli, StampMicro and StampNano +;; For more information about the format see http://golang.org/pkg/time/#pkg-constants +;FORMAT = +;; +;; Location the UI time display i.e. Asia/Shanghai +;; Empty means server's location setting +;DEFAULT_UI_LOCATION = + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Common settings +;; +;; Setting this to true will enable all cron tasks periodically with default settings. +;ENABLED = false +;; Setting this to true will run all enabled cron tasks when Gitea starts. +;RUN_AT_START = false +;; +;; Note: ``SCHEDULE`` accept formats +;; - Full crontab specs, e.g. "* * * * * ?" +;; - Descriptors, e.g. "@midnight", "@every 1h30m" +;; See more: https://pkg.go.dev/github.com/gogs/cron@v0.0.0-20171120032916-9f6c956d3e14 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Basic cron tasks - enabled by default +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Clean up old repository archives +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.archive_cleanup] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Whether to enable the job +;ENABLED = true +;; Whether to always run at least once at start up time (if ENABLED) +;RUN_AT_START = true +;; Notice if not success +;NO_SUCCESS_NOTICE = false +;; Time interval for job to run +;SCHEDULE = @midnight +;; Archives created more than OLDER_THAN ago are subject to deletion +;OLDER_THAN = 24h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Update mirrors +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.update_mirrors] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;SCHEDULE = @every 10m +;; Enable running Update mirrors task periodically. +;ENABLED = true +;; Run Update mirrors task when Gitea starts. +;RUN_AT_START = false +;; Notice if not success +;NO_SUCCESS_NOTICE = true +;; Limit the number of mirrors added to the queue to this number +;; (negative values mean no limit, 0 will result in no result in no mirrors being queued effectively disabling pull mirror updating.) +;PULL_LIMIT=50 +;; Limit the number of mirrors added to the queue to this number +;; (negative values mean no limit, 0 will result in no mirrors being queued effectively disabling push mirror updating) +;PUSH_LIMIT=50 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Repository health check +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.repo_health_check] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;SCHEDULE = @midnight +;; Enable running Repository health check task periodically. +;ENABLED = true +;; Run Repository health check task when Gitea starts. +;RUN_AT_START = false +;; Notice if not success +;NO_SUCCESS_NOTICE = false +;TIMEOUT = 60s +;; Arguments for command 'git fsck', e.g. "--unreachable --tags" +;; see more on http://git-scm.com/docs/git-fsck +;ARGS = + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Check repository statistics +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.check_repo_stats] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Enable running check repository statistics task periodically. +;ENABLED = true +;; Run check repository statistics task when Gitea starts. +;RUN_AT_START = true +;; Notice if not success +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @midnight + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.update_migration_poster_id] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +; Update migrated repositories' issues and comments' posterid, it will always attempt synchronization when the instance starts. +;ENABLED = true +;; Update migrated repositories' issues and comments' posterid when starting server (default true) +;RUN_AT_START = true +;; Notice if not success +;NO_SUCCESS_NOTICE = false +;; Interval as a duration between each synchronization. (default every 24h) +;SCHEDULE = @midnight + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Synchronize external user data (only LDAP user synchronization is supported) +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.sync_external_users] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = true +;; Synchronize external user data when starting server (default false) +;RUN_AT_START = false +;; Notice if not success +;NO_SUCCESS_NOTICE = false +;; Interval as a duration between each synchronization (default every 24h) +;SCHEDULE = @midnight +;; Create new users, update existing user data and disable users that are not in external source anymore (default) +;; or only create new users if UPDATE_EXISTING is set to false +;UPDATE_EXISTING = true + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Clean-up deleted branches +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.deleted_branches_cleanup] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = true +;; Clean-up deleted branches when starting server (default true) +;RUN_AT_START = true +;; Notice if not success +;NO_SUCCESS_NOTICE = false +;; Interval as a duration between each synchronization (default every 24h) +;SCHEDULE = @midnight +;; deleted branches than OLDER_THAN ago are subject to deletion +;OLDER_THAN = 24h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Cleanup hook_task table +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.cleanup_hook_task_table] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Whether to enable the job +;ENABLED = true +;; Whether to always run at start up time (if ENABLED) +;RUN_AT_START = false +;; Time interval for job to run +;SCHEDULE = @midnight +;; OlderThan or PerWebhook. How the records are removed, either by age (i.e. how long ago hook_task record was delivered) or by the number to keep per webhook (i.e. keep most recent x deliveries per webhook). +;CLEANUP_TYPE = OlderThan +;; If CLEANUP_TYPE is set to OlderThan, then any delivered hook_task records older than this expression will be deleted. +;OLDER_THAN = 168h +;; If CLEANUP_TYPE is set to PerWebhook, this is number of hook_task records to keep for a webhook (i.e. keep the most recent x deliveries). +;NUMBER_TO_KEEP = 10 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +; Extended cron task - not enabled by default +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Delete all unactivated accounts +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.delete_inactive_accounts] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @annually +;OLDER_THAN = 168h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Delete all repository archives +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.delete_repo_archives] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @annually; + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Garbage collect all repositories +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.git_gc_repos] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 72h +;TIMEOUT = 60s +;; Arguments for command 'git gc' +;; The default value is same with [git] -> GC_ARGS +;ARGS = + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Update the '.ssh/authorized_keys' file with Gitea SSH keys +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.resync_all_sshkeys] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 72h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Resynchronize pre-receive, update and post-receive hooks of all repositories. +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.resync_all_hooks] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 72h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Reinitialize all missing Git repositories for which records exist +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.reinit_missing_repos] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 72h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Delete all repositories missing their Git files +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.delete_missing_repos] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 72h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Delete generated repository avatars +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.delete_generated_repository_avatars] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 72h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Delete all old actions from database +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.delete_old_actions] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;NO_SUCCESS_NOTICE = false +;SCHEDULE = @every 168h +;OLDER_THAN = 8760h + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Check for new Gitea versions +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[cron.update_checker] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;ENABLED = false +;RUN_AT_START = false +;ENABLE_SUCCESS_NOTICE = false +;SCHEDULE = @every 168h +;HTTP_ENDPOINT = https://dl.gitea.io/gitea/version.json + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Git Operation timeout in seconds +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[git.timeout] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;DEFAULT = 360 +;MIGRATE = 600 +;MIRROR = 300 +;CLONE = 300 +;PULL = 300 +;GC = 60 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[mirror] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Enables the mirror functionality. Set to **false** to disable all mirrors. +;ENABLED = true +;; Disable the creation of **new** pull mirrors. Pre-existing mirrors remain valid. Will be ignored if `mirror.ENABLED` is `false`. +;DISABLE_NEW_PULL = false +;; Disable the creation of **new** push mirrors. Pre-existing mirrors remain valid. Will be ignored if `mirror.ENABLED` is `false`. +;DISABLE_NEW_PUSH = false +;; Default interval as a duration between each check +;DEFAULT_INTERVAL = 8h +;; Min interval as a duration must be > 1m +;MIN_INTERVAL = 10m + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[api] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Enables Swagger. True or false; default is true. +;ENABLE_SWAGGER = true +;; Max number of items in a page +;MAX_RESPONSE_ITEMS = 50 +;; Default paging number of api +;DEFAULT_PAGING_NUM = 30 +;; Default and maximum number of items per page for git trees api +;DEFAULT_GIT_TREES_PER_PAGE = 1000 +;; Default size of a blob returned by the blobs API (default is 10MiB) +;DEFAULT_MAX_BLOB_SIZE = 10485760 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[i18n] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;LANGS = en-US,zh-CN,zh-HK,zh-TW,de-DE,fr-FR,nl-NL,lv-LV,ru-RU,uk-UA,ja-JP,es-ES,pt-BR,pt-PT,pl-PL,bg-BG,it-IT,fi-FI,tr-TR,cs-CZ,sr-SP,sv-SE,ko-KR,el-GR,fa-IR,hu-HU,id-ID,ml-IN +;NAMES = English,简体中文,繁體中文（香港）,繁體中文（台灣）,Deutsch,français,Nederlands,latviešu,русский,Українська,日本語,español,português do Brasil,Português de Portugal,polski,български,italiano,suomi,Türkçe,čeština,српски,svenska,한국어,ελληνικά,فارسی,magyar nyelv,bahasa Indonesia,മലയാളം + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[highlight.mapping] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Extension mapping to highlight class +;; e.g. .toml=ini + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[other] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;SHOW_FOOTER_BRANDING = false +;; Show version information about Gitea and Go in the footer +;SHOW_FOOTER_VERSION = true +;; Show template execution time in the footer +;SHOW_FOOTER_TEMPLATE_LOAD_TIME = true + + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[markup] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Set the maximum number of characters in a mermaid source. (Set to -1 to disable limits) +;MERMAID_MAX_SOURCE_CHARACTERS = 5000 + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[markup.sanitizer.1] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; The following keys can appear once to define a sanitation policy rule. +;; This section can appear multiple times by adding a unique alphanumeric suffix to define multiple rules. +;; e.g., [markup.sanitizer.1] -> [markup.sanitizer.2] -> [markup.sanitizer.TeX] +;ELEMENT = span +;ALLOW_ATTR = class +;REGEXP = ^(info|warning|error)$ +;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Other markup formats e.g. asciidoc +;; +;; uncomment and enable the below section. +;; (You can add other markup formats by copying the section and adjusting +;; the section name suffix "asciidoc" to something else.) +;[markup.asciidoc] +;ENABLED = false +;; List of file extensions that should be rendered by an external command +;FILE_EXTENSIONS = .adoc,.asciidoc +;; External command to render all matching extensions +;RENDER_COMMAND = "asciidoc --out-file=- -" +;; Don't pass the file on STDIN, pass the filename as argument instead. +;IS_INPUT_FILE = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[metrics] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; Enables metrics endpoint. True or false; default is false. +;ENABLED = false +;; If you want to add authorization, specify a token here +;TOKEN = +;; Enable issue by label metrics; default is false +;ENABLED_ISSUE_BY_LABEL = false +;; Enable issue by repository metrics; default is false +;ENABLED_ISSUE_BY_REPOSITORY = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[task] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Task queue type, could be `channel` or `redis`. +;QUEUE_TYPE = channel +;; +;; Task queue length, available only when `QUEUE_TYPE` is `channel`. +;QUEUE_LENGTH = 1000 +;; +;; Task queue connection string, available only when `QUEUE_TYPE` is `redis`. +;; If there is a password of redis, use `addrs=127.0.0.1:6379 password=123 db=0`. +;QUEUE_CONN_STR = "addrs=127.0.0.1:6379 db=0" + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[migrations] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Max attempts per http/https request on migrations. +;MAX_ATTEMPTS = 3 +;; +;; Backoff time per http/https request retry (seconds) +;RETRY_BACKOFF = 3 +;; +;; Allowed domains for migrating, default is blank. Blank means everything will be allowed. +;; Multiple domains could be separated by commas. +;ALLOWED_DOMAINS = +;; +;; Blocklist for migrating, default is blank. Multiple domains could be separated by commas. +;; When ALLOWED_DOMAINS is not blank, this option has a higher priority to deny domains. +;BLOCKED_DOMAINS = +;; +;; Allow private addresses defined by RFC 1918, RFC 1122, RFC 4632 and RFC 4291 (false by default) +;ALLOW_LOCALNETWORKS = false + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[federation] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; +;; Enable/Disable federation capabilities +; ENABLED = true + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; default storage for attachments, lfs and avatars +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[storage] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; storage type +;STORAGE_TYPE = local + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; settings for repository archives, will override storage setting +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;[storage.repo-archive] +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; storage type +;STORAGE_TYPE = local + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; lfs storage will override storage +;; +;[lfs] +;STORAGE_TYPE = local + +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; +;; customize storage +;[storage.my_minio] +;STORAGE_TYPE = minio +;; +;; Minio endpoint to connect only available when STORAGE_TYPE is `minio` +;MINIO_ENDPOINT = localhost:9000 +;; +;; Minio accessKeyID to connect only available when STORAGE_TYPE is `minio` +;MINIO_ACCESS_KEY_ID = +;; +;; Minio secretAccessKey to connect only available when STORAGE_TYPE is `minio` +;MINIO_SECRET_ACCESS_KEY = +;; +;; Minio bucket to store the attachments only available when STORAGE_TYPE is `minio` +;MINIO_BUCKET = gitea +;; +;; Minio location to create bucket only available when STORAGE_TYPE is `minio` +;MINIO_LOCATION = us-east-1 +;; +;; Minio enabled ssl only available when STORAGE_TYPE is `minio` +;MINIO_USE_SSL = false + +;[proxy] +;; Enable the proxy, all requests to external via HTTP will be affected +;PROXY_ENABLED = false +;; Proxy server URL, support http://, https//, socks://, blank will follow environment http_proxy/https_proxy/no_proxy +;PROXY_URL = +;; Comma separated list of host names requiring proxy. Glob patterns (*) are accepted; use ** to match all hosts. +;PROXY_HOSTS = diff --git a/jails/config/r-git/gitea/conf/app.ini.sample b/jails/config/r-git/gitea/conf/app.ini.sample index e34373a..30e49d5 100644 --- a/jails/config/r-git/gitea/conf/app.ini.sample +++ b/jails/config/r-git/gitea/conf/app.ini.sample @@ -11,7 +11,7 @@ # choosing, INTERNAL_TOKEN is a 64-byte random number in BASE64 encoding, # JWT_SECRET is a 32-byte random number in BASE64 encoding. # -# Your can generate the token using for example: +# You can generate the token using for example: # openssl rand -base64 64 # # You can let Gitea add these to the config for you; you need to make diff --git a/jails/config/r-git/pkg-list-details-old.txt b/jails/config/r-git/pkg-list-details-old.txt new file mode 100644 index 0000000..e29bce9 --- /dev/null +++ b/jails/config/r-git/pkg-list-details-old.txt @@ -0,0 +1,12 @@ +pkgp123____openldap26-client-2.6.3 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____gitea-1.17.3 +pkgp-freebsd-pkg____git-lfs-3.0.2_6 +pkgp-freebsd-pkg____htop-3.2.1 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____sudo-1.9.12p1 +pkgp-freebsd-pkg____tmux-3.3a +pkgp-freebsd-pkg____wireguard-2,1 +pkgp-freebsd-pkg____zip-3.0_1 diff --git a/jails/config/r-git/pkg-list-details.txt b/jails/config/r-git/pkg-list-details.txt index 15b09a6..7777806 100644 --- a/jails/config/r-git/pkg-list-details.txt +++ b/jails/config/r-git/pkg-list-details.txt @@ -1,9 +1,12 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____gitea-1.16.5_1 -pkgp-freebsd-pkg____git-lfs-3.0.2_1 -pkgp-freebsd-pkg____htop-3.1.2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openldap-sasl-client-2.4.59 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 +pkgp123____openldap26-client-2.6.3 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____gitea-1.17.3 +pkgp-freebsd-pkg____git-lfs-3.0.2_6 +pkgp-freebsd-pkg____htop-3.2.1 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____sudo-1.9.12p1 +pkgp-freebsd-pkg____tmux-3.3a +pkgp-freebsd-pkg____wireguard-2,1 +pkgp-freebsd-pkg____zip-3.0_1 diff --git a/jails/config/r-git/pkg-list-old.txt b/jails/config/r-git/pkg-list-old.txt new file mode 100644 index 0000000..2e75a7e --- /dev/null +++ b/jails/config/r-git/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion gitea git-lfs htop nano openldap26-client pkg sudo tmux wireguard zip diff --git a/jails/config/r-git/pkg-list.txt b/jails/config/r-git/pkg-list.txt index d3e0452..2e75a7e 100644 --- a/jails/config/r-git/pkg-list.txt +++ b/jails/config/r-git/pkg-list.txt @@ -1 +1 @@ -bash bash-completion gitea git-lfs htop nano openldap-sasl-client pkg sudo +bash bash-completion gitea git-lfs htop nano openldap26-client pkg sudo tmux wireguard zip diff --git a/jails/config/r-git/pkgp.conf b/jails/config/r-git/pkgp.conf new file mode 100644 index 0000000..86e5a9a --- /dev/null +++ b/jails/config/r-git/pkgp.conf @@ -0,0 +1,20 @@ +FreeBSD: { + url: "pkg+http://pkg.FreeBSD.org/${ABI}/latest", + enabled: no +} + +pkgp-freebsd-pkg: { + url: "http://pkgp-freebsd-pkg.ahlawat.com/${ABI}/latest", + mirror_type: "http", + enabled: yes, + priority: 10 +} + +pkgp123: { + url: "http://pkgp.ahlawat.com/packages/pj123-default", + mirror_type: "http", + signature_type: "pubkey", + pubkey: "/mnt/certs/poudriere.cert", + enabled: yes, + priority: 100 +} diff --git a/jails/config/r-ldap-mgr/pkg-list-details.txt b/jails/config/r-ldap-mgr/pkg-list-details.txt deleted file mode 100644 index d88abc0..0000000 --- a/jails/config/r-ldap-mgr/pkg-list-details.txt +++ /dev/null @@ -1,9 +0,0 @@ -pkgp-freebsd-pkg____apache24-2.4.53 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____ldap-account-manager-7.9 -pkgp-freebsd-pkg____mod_php80-8.0.17_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____phpldapadmin-php80-1.2.6.3_1 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 diff --git a/jails/config/r-ldap/pkg-list-details.txt b/jails/config/r-ldap/pkg-list-details.txt deleted file mode 100644 index 48d9ff1..0000000 --- a/jails/config/r-ldap/pkg-list-details.txt +++ /dev/null @@ -1,9 +0,0 @@ -pkgp122____openldap24-client-2.4.59_4 -pkgp123____openldap24-server-2.4.59_9 -pkgp123____pkg-1.17.5_1 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____htop-3.1.2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openssl-1.1.1n,1 -pkgp-freebsd-pkg____sudo-1.9.10 diff --git a/jails/config/r-ldap/pkg-list.txt b/jails/config/r-ldap/pkg-list.txt deleted file mode 100644 index 43ef86f..0000000 --- a/jails/config/r-ldap/pkg-list.txt +++ /dev/null @@ -1 +0,0 @@ -bash bash-completion htop nano openldap24-client openldap24-server openssl pkg sudo diff --git a/jails/config/r-mazes-backend/pkg-list-details.txt b/jails/config/r-mazes-backend/pkg-list-details.txt deleted file mode 100644 index 18888e7..0000000 --- a/jails/config/r-mazes-backend/pkg-list-details.txt +++ /dev/null @@ -1,6 +0,0 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openjdk16-16.0.2+7.1_1 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 diff --git a/jails/config/r-mazes-backend/pkg-list.txt b/jails/config/r-mazes-backend/pkg-list.txt deleted file mode 100644 index 7911c22..0000000 --- a/jails/config/r-mazes-backend/pkg-list.txt +++ /dev/null @@ -1 +0,0 @@ -bash bash-completion nano openjdk16 pkg sudo diff --git a/jails/config/r-mazes-server-1/pkg-list-details.txt b/jails/config/r-mazes-server-1/pkg-list-details.txt deleted file mode 100644 index ee44d0f..0000000 --- a/jails/config/r-mazes-server-1/pkg-list-details.txt +++ /dev/null @@ -1,5 +0,0 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 diff --git a/jails/config/r-mazes-server-1/pkg-list.txt b/jails/config/r-mazes-server-1/pkg-list.txt deleted file mode 100644 index 82ba5b1..0000000 --- a/jails/config/r-mazes-server-1/pkg-list.txt +++ /dev/null @@ -1 +0,0 @@ -bash bash-completion nano pkg sudo diff --git a/jails/config/r-mazes-server-2/pkg-list-details.txt b/jails/config/r-mazes-server-2/pkg-list-details.txt deleted file mode 100644 index ee44d0f..0000000 --- a/jails/config/r-mazes-server-2/pkg-list-details.txt +++ /dev/null @@ -1,5 +0,0 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 diff --git a/jails/config/r-mazes-server-2/pkg-list.txt b/jails/config/r-mazes-server-2/pkg-list.txt deleted file mode 100644 index 82ba5b1..0000000 --- a/jails/config/r-mazes-server-2/pkg-list.txt +++ /dev/null @@ -1 +0,0 @@ -bash bash-completion nano pkg sudo diff --git a/jails/config/r-mazes/pkg-list-details.txt b/jails/config/r-mazes/pkg-list-details.txt deleted file mode 100644 index 18888e7..0000000 --- a/jails/config/r-mazes/pkg-list-details.txt +++ /dev/null @@ -1,6 +0,0 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openjdk16-16.0.2+7.1_1 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 diff --git a/jails/config/r-mazes/pkg-list.txt b/jails/config/r-mazes/pkg-list.txt deleted file mode 100644 index 7911c22..0000000 --- a/jails/config/r-mazes/pkg-list.txt +++ /dev/null @@ -1 +0,0 @@ -bash bash-completion nano openjdk16 pkg sudo diff --git a/jails/config/r-repo/.keep b/jails/config/r-repo/.keep deleted file mode 100644 index e69de29..0000000 diff --git a/jails/config/r-repo/pkg-list-details.txt b/jails/config/r-repo/pkg-list-details.txt deleted file mode 100644 index 7d19a75..0000000 --- a/jails/config/r-repo/pkg-list-details.txt +++ /dev/null @@ -1,7 +0,0 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openjdk8-8.322.06.1 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 -pkgp-freebsd-pkg____wget-1.21.3 diff --git a/jails/config/r-repo/pkg-list.txt b/jails/config/r-repo/pkg-list.txt deleted file mode 100644 index d75d87f..0000000 --- a/jails/config/r-repo/pkg-list.txt +++ /dev/null @@ -1 +0,0 @@ -bash bash-completion nano openjdk8 pkg sudo wget diff --git a/jails/config/r-vault/.keep b/jails/config/r-vault/.keep deleted file mode 100644 index e69de29..0000000 diff --git a/jails/config/r-vault/pkg-list-details.txt b/jails/config/r-vault/pkg-list-details.txt deleted file mode 100644 index 4a1ad8d..0000000 --- a/jails/config/r-vault/pkg-list-details.txt +++ /dev/null @@ -1,7 +0,0 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 -pkgp-freebsd-pkg____tmux-3.2a -pkgp-freebsd-pkg____vault-1.8.7_1 diff --git a/jails/config/r-vault/pkg-list.txt b/jails/config/r-vault/pkg-list.txt deleted file mode 100644 index 2af7087..0000000 --- a/jails/config/r-vault/pkg-list.txt +++ /dev/null @@ -1 +0,0 @@ -bash bash-completion nano pkg sudo tmux vault diff --git a/jails/config/r-web/.keep b/jails/config/r-web/.keep deleted file mode 100644 index e69de29..0000000 diff --git a/jails/config/r-web/pkg-list-details.txt b/jails/config/r-web/pkg-list-details.txt deleted file mode 100644 index 93f8bc2..0000000 --- a/jails/config/r-web/pkg-list-details.txt +++ /dev/null @@ -1,8 +0,0 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____htop-3.1.2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openjdk16-16.0.2+7.1_1 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____sudo-1.9.10 -pkgp-freebsd-pkg____tmux-3.2a diff --git a/jails/config/r-web/pkg-list.txt b/jails/config/r-web/pkg-list.txt deleted file mode 100644 index d1d3332..0000000 --- a/jails/config/r-web/pkg-list.txt +++ /dev/null @@ -1 +0,0 @@ -bash bash-completion htop nano openjdk16 pkg sudo tmux diff --git a/jails/config/rachna/pkg-list-details-old.txt b/jails/config/rachna/pkg-list-details-old.txt new file mode 100644 index 0000000..79fe5b9 --- /dev/null +++ b/jails/config/rachna/pkg-list-details-old.txt @@ -0,0 +1,8 @@ +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____php81-8.1.12 +pkgp-freebsd-pkg____php81-mysqli-8.1.12 +pkgp-freebsd-pkg____php81-session-8.1.12 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/rachna/pkg-list-details.txt b/jails/config/rachna/pkg-list-details.txt index fae934f..87bcd3f 100644 --- a/jails/config/rachna/pkg-list-details.txt +++ b/jails/config/rachna/pkg-list-details.txt @@ -1,9 +1,8 @@ -pkgp-freebsd-pkg____apache24-2.4.53 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____mod_php81-8.1.4_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____php81-8.1.4_2 -pkgp-freebsd-pkg____php81-mysqli-8.1.4_2 -pkgp-freebsd-pkg____php81-session-8.1.4_2 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____php81-8.1.13 +pkgp-freebsd-pkg____php81-mysqli-8.1.13 +pkgp-freebsd-pkg____php81-session-8.1.13 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/rachna/pkg-list-old.txt b/jails/config/rachna/pkg-list-old.txt new file mode 100644 index 0000000..943fd00 --- /dev/null +++ b/jails/config/rachna/pkg-list-old.txt @@ -0,0 +1 @@ +apache24 bash bash-completion nano php81 php81-mysqli php81-session pkg diff --git a/jails/config/rachna/pkg-list.txt b/jails/config/rachna/pkg-list.txt index 218188c..943fd00 100644 --- a/jails/config/rachna/pkg-list.txt +++ b/jails/config/rachna/pkg-list.txt @@ -1 +1 @@ -apache24 bash bash-completion mod_php81 nano php81 php81-mysqli php81-session pkg +apache24 bash bash-completion nano php81 php81-mysqli php81-session pkg diff --git a/jails/config/rishabh/pkg-list-details-old.txt b/jails/config/rishabh/pkg-list-details-old.txt new file mode 100644 index 0000000..79fe5b9 --- /dev/null +++ b/jails/config/rishabh/pkg-list-details-old.txt @@ -0,0 +1,8 @@ +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____php81-8.1.12 +pkgp-freebsd-pkg____php81-mysqli-8.1.12 +pkgp-freebsd-pkg____php81-session-8.1.12 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/rishabh/pkg-list-details.txt b/jails/config/rishabh/pkg-list-details.txt index fae934f..87bcd3f 100644 --- a/jails/config/rishabh/pkg-list-details.txt +++ b/jails/config/rishabh/pkg-list-details.txt @@ -1,9 +1,8 @@ -pkgp-freebsd-pkg____apache24-2.4.53 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____mod_php81-8.1.4_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____php81-8.1.4_2 -pkgp-freebsd-pkg____php81-mysqli-8.1.4_2 -pkgp-freebsd-pkg____php81-session-8.1.4_2 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____php81-8.1.13 +pkgp-freebsd-pkg____php81-mysqli-8.1.13 +pkgp-freebsd-pkg____php81-session-8.1.13 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/rishabh/pkg-list-old.txt b/jails/config/rishabh/pkg-list-old.txt new file mode 100644 index 0000000..943fd00 --- /dev/null +++ b/jails/config/rishabh/pkg-list-old.txt @@ -0,0 +1 @@ +apache24 bash bash-completion nano php81 php81-mysqli php81-session pkg diff --git a/jails/config/rishabh/pkg-list.txt b/jails/config/rishabh/pkg-list.txt index 218188c..943fd00 100644 --- a/jails/config/rishabh/pkg-list.txt +++ b/jails/config/rishabh/pkg-list.txt @@ -1 +1 @@ -apache24 bash bash-completion mod_php81 nano php81 php81-mysqli php81-session pkg +apache24 bash bash-completion nano php81 php81-mysqli php81-session pkg diff --git a/jails/config/sharad/pkg-list-details-old.txt b/jails/config/sharad/pkg-list-details-old.txt new file mode 100644 index 0000000..79fe5b9 --- /dev/null +++ b/jails/config/sharad/pkg-list-details-old.txt @@ -0,0 +1,8 @@ +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____php81-8.1.12 +pkgp-freebsd-pkg____php81-mysqli-8.1.12 +pkgp-freebsd-pkg____php81-session-8.1.12 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/sharad/pkg-list-details.txt b/jails/config/sharad/pkg-list-details.txt index fae934f..87bcd3f 100644 --- a/jails/config/sharad/pkg-list-details.txt +++ b/jails/config/sharad/pkg-list-details.txt @@ -1,9 +1,8 @@ -pkgp-freebsd-pkg____apache24-2.4.53 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____mod_php81-8.1.4_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____php81-8.1.4_2 -pkgp-freebsd-pkg____php81-mysqli-8.1.4_2 -pkgp-freebsd-pkg____php81-session-8.1.4_2 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____php81-8.1.13 +pkgp-freebsd-pkg____php81-mysqli-8.1.13 +pkgp-freebsd-pkg____php81-session-8.1.13 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/sharad/pkg-list-old.txt b/jails/config/sharad/pkg-list-old.txt new file mode 100644 index 0000000..943fd00 --- /dev/null +++ b/jails/config/sharad/pkg-list-old.txt @@ -0,0 +1 @@ +apache24 bash bash-completion nano php81 php81-mysqli php81-session pkg diff --git a/jails/config/sharad/pkg-list.txt b/jails/config/sharad/pkg-list.txt index 218188c..943fd00 100644 --- a/jails/config/sharad/pkg-list.txt +++ b/jails/config/sharad/pkg-list.txt @@ -1 +1 @@ -apache24 bash bash-completion mod_php81 nano php81 php81-mysqli php81-session pkg +apache24 bash bash-completion nano php81 php81-mysqli php81-session pkg diff --git a/jails/config/torrent/pkg-list-details-old.txt b/jails/config/torrent/pkg-list-details-old.txt new file mode 100644 index 0000000..a1e7cb9 --- /dev/null +++ b/jails/config/torrent/pkg-list-details-old.txt @@ -0,0 +1,14 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____firefox-esr-102.5.0,1 +pkgp-freebsd-pkg____fluxbox-1.3.7_5 +pkgp-freebsd-pkg____mc-4.8.28 +pkgp-freebsd-pkg____mesa-dri-22.2.3 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____qbittorrent-4.4.3.1_1 +pkgp-freebsd-pkg____rsync-3.2.6 +pkgp-freebsd-pkg____sudo-1.9.12p1 +pkgp-freebsd-pkg____tigervnc-1.9.0_4 +pkgp-freebsd-pkg____xauth-1.1.1 +pkgp-freebsd-pkg____xterm-375 diff --git a/jails/config/torrent/pkg-list-details.txt b/jails/config/torrent/pkg-list-details.txt index e82ba96..fd914b4 100644 --- a/jails/config/torrent/pkg-list-details.txt +++ b/jails/config/torrent/pkg-list-details.txt @@ -1,14 +1,14 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____firefox-esr-91.8.0,1 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____firefox-esr-102.5.0_1,1 pkgp-freebsd-pkg____fluxbox-1.3.7_5 pkgp-freebsd-pkg____mc-4.8.28 -pkgp-freebsd-pkg____mesa-dri-21.3.8 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____qbittorrent-4.4.1 -pkgp-freebsd-pkg____rsync-3.2.3_1 -pkgp-freebsd-pkg____sudo-1.9.10 +pkgp-freebsd-pkg____mesa-dri-22.2.3 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____qbittorrent-4.4.3.1_1 +pkgp-freebsd-pkg____rsync-3.2.6 +pkgp-freebsd-pkg____sudo-1.9.12p1 pkgp-freebsd-pkg____tigervnc-1.9.0_4 -pkgp-freebsd-pkg____xauth-1.1 -pkgp-freebsd-pkg____xterm-372 +pkgp-freebsd-pkg____xauth-1.1.1 +pkgp-freebsd-pkg____xterm-377 diff --git a/jails/config/torrent/pkg-list-old.txt b/jails/config/torrent/pkg-list-old.txt new file mode 100644 index 0000000..d531a97 --- /dev/null +++ b/jails/config/torrent/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion firefox-esr fluxbox mc mesa-dri nano pkg qbittorrent rsync sudo tigervnc xauth xterm diff --git a/jails/config/vm/gns3.sh b/jails/config/vm/gns3.sh index 6df2512..3688259 100755 --- a/jails/config/vm/gns3.sh +++ b/jails/config/vm/gns3.sh @@ -11,7 +11,7 @@ # ./gns3.sh under tmux # disabled for now -#exit +exit # clean cached state bhyvectl --destroy --vm=gns3 diff --git a/jails/config/vm/pkg-list-details-old.txt b/jails/config/vm/pkg-list-details-old.txt new file mode 100644 index 0000000..2e52918 --- /dev/null +++ b/jails/config/vm/pkg-list-details-old.txt @@ -0,0 +1,6 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____bhyve-firmware-1.0_1 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____tmux-3.3a diff --git a/jails/config/vm/pkg-list-details.txt b/jails/config/vm/pkg-list-details.txt index 42d297b..26c5817 100644 --- a/jails/config/vm/pkg-list-details.txt +++ b/jails/config/vm/pkg-list-details.txt @@ -1,6 +1,6 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 pkgp-freebsd-pkg____bhyve-firmware-1.0_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____tmux-3.2a +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____tmux-3.3a diff --git a/jails/config/vm/pkg-list-old.txt b/jails/config/vm/pkg-list-old.txt new file mode 100644 index 0000000..2eb3cf9 --- /dev/null +++ b/jails/config/vm/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion bhyve-firmware nano pkg tmux diff --git a/jails/config/vm/w2019.sh b/jails/config/vm/w2019.sh index 20d4629..7577832 100755 --- a/jails/config/vm/w2019.sh +++ b/jails/config/vm/w2019.sh @@ -13,6 +13,8 @@ # clean cached state bhyvectl --destroy --vm=w2019 +exit + while true do diff --git a/jails/config/vpngw/pkg-list-details-old.txt b/jails/config/vpngw/pkg-list-details-old.txt new file mode 100644 index 0000000..b9fc7aa --- /dev/null +++ b/jails/config/vpngw/pkg-list-details-old.txt @@ -0,0 +1,7 @@ +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____git-2.38.1_3 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____openvpn-2.5.8 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____rsync-3.2.6 diff --git a/jails/config/vpngw/pkg-list-details.txt b/jails/config/vpngw/pkg-list-details.txt index c46bb32..05447dd 100644 --- a/jails/config/vpngw/pkg-list-details.txt +++ b/jails/config/vpngw/pkg-list-details.txt @@ -1,7 +1,7 @@ -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____git-2.35.1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____openvpn-2.5.6_1 -pkgp-freebsd-pkg____pkg-1.17.5_1 -pkgp-freebsd-pkg____rsync-3.2.3_1 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____git-2.38.1_4 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____openvpn-2.5.8 +pkgp-freebsd-pkg____pkg-1.18.4 +pkgp-freebsd-pkg____rsync-3.2.6 diff --git a/jails/config/vpngw/pkg-list-old.txt b/jails/config/vpngw/pkg-list-old.txt new file mode 100644 index 0000000..06ff5f6 --- /dev/null +++ b/jails/config/vpngw/pkg-list-old.txt @@ -0,0 +1 @@ +bash bash-completion git nano openvpn pkg rsync diff --git a/jails/config/web-datavpc/httpd.conf b/jails/config/web-datavpc/httpd.conf index dfdd57c..2c6523a 100644 --- a/jails/config/web-datavpc/httpd.conf +++ b/jails/config/web-datavpc/httpd.conf @@ -555,9 +555,6 @@ Include etc/apache24/Includes/*.conf ServerName www.datavpc.com ServerAlias *.datavpc.com ServerAlias datavpc.com - ServerName www.mydatavpc.com - ServerAlias *.mydatavpc.com - ServerAlias mydatavpc.com Protocols h2 http/1.1 diff --git a/jails/config/web-datavpc/pkg-list-details-old.txt b/jails/config/web-datavpc/pkg-list-details-old.txt new file mode 100644 index 0000000..79fe5b9 --- /dev/null +++ b/jails/config/web-datavpc/pkg-list-details-old.txt @@ -0,0 +1,8 @@ +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____php81-8.1.12 +pkgp-freebsd-pkg____php81-mysqli-8.1.12 +pkgp-freebsd-pkg____php81-session-8.1.12 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/web-datavpc/pkg-list-details.txt b/jails/config/web-datavpc/pkg-list-details.txt index fae934f..87bcd3f 100644 --- a/jails/config/web-datavpc/pkg-list-details.txt +++ b/jails/config/web-datavpc/pkg-list-details.txt @@ -1,9 +1,8 @@ -pkgp-freebsd-pkg____apache24-2.4.53 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____mod_php81-8.1.4_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____php81-8.1.4_2 -pkgp-freebsd-pkg____php81-mysqli-8.1.4_2 -pkgp-freebsd-pkg____php81-session-8.1.4_2 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____php81-8.1.13 +pkgp-freebsd-pkg____php81-mysqli-8.1.13 +pkgp-freebsd-pkg____php81-session-8.1.13 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/web-datavpc/pkg-list-old.txt b/jails/config/web-datavpc/pkg-list-old.txt new file mode 100644 index 0000000..943fd00 --- /dev/null +++ b/jails/config/web-datavpc/pkg-list-old.txt @@ -0,0 +1 @@ +apache24 bash bash-completion nano php81 php81-mysqli php81-session pkg diff --git a/jails/config/web-datavpc/pkg-list.txt b/jails/config/web-datavpc/pkg-list.txt index 218188c..943fd00 100644 --- a/jails/config/web-datavpc/pkg-list.txt +++ b/jails/config/web-datavpc/pkg-list.txt @@ -1 +1 @@ -apache24 bash bash-completion mod_php81 nano php81 php81-mysqli php81-session pkg +apache24 bash bash-completion nano php81 php81-mysqli php81-session pkg diff --git a/jails/config/web-diyit/pkg-list-details-old.txt b/jails/config/web-diyit/pkg-list-details-old.txt new file mode 100644 index 0000000..6a5e330 --- /dev/null +++ b/jails/config/web-diyit/pkg-list-details-old.txt @@ -0,0 +1,26 @@ +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____blackbox_exporter-0.22.0_3 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____php81-8.1.12 +pkgp-freebsd-pkg____php81-bcmath-8.1.12 +pkgp-freebsd-pkg____php81-ctype-8.1.12 +pkgp-freebsd-pkg____php81-curl-8.1.12 +pkgp-freebsd-pkg____php81-dom-8.1.12 +pkgp-freebsd-pkg____php81-exif-8.1.12 +pkgp-freebsd-pkg____php81-fileinfo-8.1.12 +pkgp-freebsd-pkg____php81-filter-8.1.12 +pkgp-freebsd-pkg____php81-ftp-8.1.12 +pkgp-freebsd-pkg____php81-iconv-8.1.12 +pkgp-freebsd-pkg____php81-mbstring-8.1.12 +pkgp-freebsd-pkg____php81-mysqli-8.1.12 +pkgp-freebsd-pkg____php81-pecl-imagick-3.7.0 +pkgp-freebsd-pkg____php81-session-8.1.12 +pkgp-freebsd-pkg____php81-sockets-8.1.12 +pkgp-freebsd-pkg____php81-sodium-8.1.12 +pkgp-freebsd-pkg____php81-tokenizer-8.1.12 +pkgp-freebsd-pkg____php81-xml-8.1.12 +pkgp-freebsd-pkg____php81-zip-8.1.12 +pkgp-freebsd-pkg____php81-zlib-8.1.12 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/web-diyit/pkg-list-details.txt b/jails/config/web-diyit/pkg-list-details.txt index 6d6308a..d7439dc 100644 --- a/jails/config/web-diyit/pkg-list-details.txt +++ b/jails/config/web-diyit/pkg-list-details.txt @@ -1,27 +1,26 @@ -pkgp-freebsd-pkg____apache24-2.4.53 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____blackbox_exporter-0.17.0_2 -pkgp-freebsd-pkg____mod_php81-8.1.4_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____php81-8.1.4_2 -pkgp-freebsd-pkg____php81-bcmath-8.1.4_2 -pkgp-freebsd-pkg____php81-ctype-8.1.4_2 -pkgp-freebsd-pkg____php81-curl-8.1.4_2 -pkgp-freebsd-pkg____php81-dom-8.1.4_1 -pkgp-freebsd-pkg____php81-exif-8.1.4_2 -pkgp-freebsd-pkg____php81-fileinfo-8.1.4_2 -pkgp-freebsd-pkg____php81-filter-8.1.4_2 -pkgp-freebsd-pkg____php81-ftp-8.1.4_2 -pkgp-freebsd-pkg____php81-iconv-8.1.4_2 -pkgp-freebsd-pkg____php81-mbstring-8.1.4_2 -pkgp-freebsd-pkg____php81-mysqli-8.1.4_2 -pkgp-freebsd-pkg____php81-pecl-imagick-3.5.1 -pkgp-freebsd-pkg____php81-session-8.1.4_2 -pkgp-freebsd-pkg____php81-sockets-8.1.4_2 -pkgp-freebsd-pkg____php81-sodium-8.1.4_2 -pkgp-freebsd-pkg____php81-tokenizer-8.1.4_2 -pkgp-freebsd-pkg____php81-xml-8.1.4_1 -pkgp-freebsd-pkg____php81-zip-8.1.4_2 -pkgp-freebsd-pkg____php81-zlib-8.1.4_2 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____blackbox_exporter-0.22.0_3 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____php81-8.1.13 +pkgp-freebsd-pkg____php81-bcmath-8.1.13 +pkgp-freebsd-pkg____php81-ctype-8.1.13 +pkgp-freebsd-pkg____php81-curl-8.1.13 +pkgp-freebsd-pkg____php81-dom-8.1.13 +pkgp-freebsd-pkg____php81-exif-8.1.13 +pkgp-freebsd-pkg____php81-fileinfo-8.1.13 +pkgp-freebsd-pkg____php81-filter-8.1.13 +pkgp-freebsd-pkg____php81-ftp-8.1.13 +pkgp-freebsd-pkg____php81-iconv-8.1.13 +pkgp-freebsd-pkg____php81-mbstring-8.1.13 +pkgp-freebsd-pkg____php81-mysqli-8.1.13 +pkgp-freebsd-pkg____php81-pecl-imagick-3.7.0 +pkgp-freebsd-pkg____php81-session-8.1.13 +pkgp-freebsd-pkg____php81-sockets-8.1.13 +pkgp-freebsd-pkg____php81-sodium-8.1.13 +pkgp-freebsd-pkg____php81-tokenizer-8.1.13 +pkgp-freebsd-pkg____php81-xml-8.1.13 +pkgp-freebsd-pkg____php81-zip-8.1.13 +pkgp-freebsd-pkg____php81-zlib-8.1.13 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/web-diyit/pkg-list-old.txt b/jails/config/web-diyit/pkg-list-old.txt new file mode 100644 index 0000000..e6a5ca4 --- /dev/null +++ b/jails/config/web-diyit/pkg-list-old.txt @@ -0,0 +1 @@ +apache24 bash bash-completion blackbox_exporter nano php81 php81-bcmath php81-ctype php81-curl php81-dom php81-exif php81-fileinfo php81-filter php81-ftp php81-iconv php81-mbstring php81-mysqli php81-pecl-imagick php81-session php81-sockets php81-sodium php81-tokenizer php81-xml php81-zip php81-zlib pkg diff --git a/jails/config/web-diyit/pkg-list.txt b/jails/config/web-diyit/pkg-list.txt index 4764a42..e6a5ca4 100644 --- a/jails/config/web-diyit/pkg-list.txt +++ b/jails/config/web-diyit/pkg-list.txt @@ -1 +1 @@ -apache24 bash bash-completion blackbox_exporter mod_php81 nano php81 php81-bcmath php81-ctype php81-curl php81-dom php81-exif php81-fileinfo php81-filter php81-ftp php81-iconv php81-mbstring php81-mysqli php81-pecl-imagick php81-session php81-sockets php81-sodium php81-tokenizer php81-xml php81-zip php81-zlib pkg +apache24 bash bash-completion blackbox_exporter nano php81 php81-bcmath php81-ctype php81-curl php81-dom php81-exif php81-fileinfo php81-filter php81-ftp php81-iconv php81-mbstring php81-mysqli php81-pecl-imagick php81-session php81-sockets php81-sodium php81-tokenizer php81-xml php81-zip php81-zlib pkg diff --git a/jails/config/web-rockwood/httpd.conf b/jails/config/web-rockwood/httpd.conf index d04d94a..58d7479 100644 --- a/jails/config/web-rockwood/httpd.conf +++ b/jails/config/web-rockwood/httpd.conf @@ -555,9 +555,6 @@ Include etc/apache24/Includes/*.conf ServerName www.rockwoodestates.org ServerAlias *.rockwoodestates.org ServerAlias rockwoodestates.org - ServerAlias www.rockwoodranch.org - ServerAlias *.rockwoodranch.org - ServerAlias rockwoodranch.org Protocols h2 http/1.1 diff --git a/jails/config/web-rockwood/pkg-list-details-old.txt b/jails/config/web-rockwood/pkg-list-details-old.txt new file mode 100644 index 0000000..577cb51 --- /dev/null +++ b/jails/config/web-rockwood/pkg-list-details-old.txt @@ -0,0 +1,26 @@ +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____php81-8.1.12 +pkgp-freebsd-pkg____php81-bcmath-8.1.12 +pkgp-freebsd-pkg____php81-ctype-8.1.12 +pkgp-freebsd-pkg____php81-curl-8.1.12 +pkgp-freebsd-pkg____php81-dom-8.1.12 +pkgp-freebsd-pkg____php81-exif-8.1.12 +pkgp-freebsd-pkg____php81-fileinfo-8.1.12 +pkgp-freebsd-pkg____php81-filter-8.1.12 +pkgp-freebsd-pkg____php81-ftp-8.1.12 +pkgp-freebsd-pkg____php81-iconv-8.1.12 +pkgp-freebsd-pkg____php81-mbstring-8.1.12 +pkgp-freebsd-pkg____php81-mysqli-8.1.12 +pkgp-freebsd-pkg____php81-pdo_mysql-8.1.12 +pkgp-freebsd-pkg____php81-pecl-imagick-3.7.0 +pkgp-freebsd-pkg____php81-session-8.1.12 +pkgp-freebsd-pkg____php81-sockets-8.1.12 +pkgp-freebsd-pkg____php81-sodium-8.1.12 +pkgp-freebsd-pkg____php81-tokenizer-8.1.12 +pkgp-freebsd-pkg____php81-xml-8.1.12 +pkgp-freebsd-pkg____php81-zip-8.1.12 +pkgp-freebsd-pkg____php81-zlib-8.1.12 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/web-rockwood/pkg-list-details.txt b/jails/config/web-rockwood/pkg-list-details.txt index 89c1a7e..27b1072 100644 --- a/jails/config/web-rockwood/pkg-list-details.txt +++ b/jails/config/web-rockwood/pkg-list-details.txt @@ -1,27 +1,26 @@ -pkgp-freebsd-pkg____apache24-2.4.53 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____mod_php81-8.1.4_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____php81-8.1.4_2 -pkgp-freebsd-pkg____php81-bcmath-8.1.4_2 -pkgp-freebsd-pkg____php81-ctype-8.1.4_2 -pkgp-freebsd-pkg____php81-curl-8.1.4_2 -pkgp-freebsd-pkg____php81-dom-8.1.4_1 -pkgp-freebsd-pkg____php81-exif-8.1.4_2 -pkgp-freebsd-pkg____php81-fileinfo-8.1.4_2 -pkgp-freebsd-pkg____php81-filter-8.1.4_2 -pkgp-freebsd-pkg____php81-ftp-8.1.4_2 -pkgp-freebsd-pkg____php81-iconv-8.1.4_2 -pkgp-freebsd-pkg____php81-mbstring-8.1.4_2 -pkgp-freebsd-pkg____php81-mysqli-8.1.4_2 -pkgp-freebsd-pkg____php81-pdo_mysql-8.1.4_2 -pkgp-freebsd-pkg____php81-pecl-imagick-3.5.1 -pkgp-freebsd-pkg____php81-session-8.1.4_2 -pkgp-freebsd-pkg____php81-sockets-8.1.4_2 -pkgp-freebsd-pkg____php81-sodium-8.1.4_2 -pkgp-freebsd-pkg____php81-tokenizer-8.1.4_2 -pkgp-freebsd-pkg____php81-xml-8.1.4_1 -pkgp-freebsd-pkg____php81-zip-8.1.4_2 -pkgp-freebsd-pkg____php81-zlib-8.1.4_2 -pkgp-freebsd-pkg____pkg-1.17.5_1 +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____php81-8.1.13 +pkgp-freebsd-pkg____php81-bcmath-8.1.13 +pkgp-freebsd-pkg____php81-ctype-8.1.13 +pkgp-freebsd-pkg____php81-curl-8.1.13 +pkgp-freebsd-pkg____php81-dom-8.1.13 +pkgp-freebsd-pkg____php81-exif-8.1.13 +pkgp-freebsd-pkg____php81-fileinfo-8.1.13 +pkgp-freebsd-pkg____php81-filter-8.1.13 +pkgp-freebsd-pkg____php81-ftp-8.1.13 +pkgp-freebsd-pkg____php81-iconv-8.1.13 +pkgp-freebsd-pkg____php81-mbstring-8.1.13 +pkgp-freebsd-pkg____php81-mysqli-8.1.13 +pkgp-freebsd-pkg____php81-pdo_mysql-8.1.13 +pkgp-freebsd-pkg____php81-pecl-imagick-3.7.0 +pkgp-freebsd-pkg____php81-session-8.1.13 +pkgp-freebsd-pkg____php81-sockets-8.1.13 +pkgp-freebsd-pkg____php81-sodium-8.1.13 +pkgp-freebsd-pkg____php81-tokenizer-8.1.13 +pkgp-freebsd-pkg____php81-xml-8.1.13 +pkgp-freebsd-pkg____php81-zip-8.1.13 +pkgp-freebsd-pkg____php81-zlib-8.1.13 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/web-rockwood/pkg-list-old.txt b/jails/config/web-rockwood/pkg-list-old.txt new file mode 100644 index 0000000..d2139df --- /dev/null +++ b/jails/config/web-rockwood/pkg-list-old.txt @@ -0,0 +1 @@ +apache24 bash bash-completion nano php81 php81-bcmath php81-ctype php81-curl php81-dom php81-exif php81-fileinfo php81-filter php81-ftp php81-iconv php81-mbstring php81-mysqli php81-pdo_mysql php81-pecl-imagick php81-session php81-sockets php81-sodium php81-tokenizer php81-xml php81-zip php81-zlib pkg diff --git a/jails/config/web-rockwood/pkg-list.txt b/jails/config/web-rockwood/pkg-list.txt index e1aa213..d2139df 100644 --- a/jails/config/web-rockwood/pkg-list.txt +++ b/jails/config/web-rockwood/pkg-list.txt @@ -1 +1 @@ -apache24 bash bash-completion mod_php81 nano php81 php81-bcmath php81-ctype php81-curl php81-dom php81-exif php81-fileinfo php81-filter php81-ftp php81-iconv php81-mbstring php81-mysqli php81-pdo_mysql php81-pecl-imagick php81-session php81-sockets php81-sodium php81-tokenizer php81-xml php81-zip php81-zlib pkg +apache24 bash bash-completion nano php81 php81-bcmath php81-ctype php81-curl php81-dom php81-exif php81-fileinfo php81-filter php81-ftp php81-iconv php81-mbstring php81-mysqli php81-pdo_mysql php81-pecl-imagick php81-session php81-sockets php81-sodium php81-tokenizer php81-xml php81-zip php81-zlib pkg diff --git a/jails/config/web-scvcc-rental/pkg-list-details-old.txt b/jails/config/web-scvcc-rental/pkg-list-details-old.txt new file mode 100644 index 0000000..79fe5b9 --- /dev/null +++ b/jails/config/web-scvcc-rental/pkg-list-details-old.txt @@ -0,0 +1,8 @@ +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____php81-8.1.12 +pkgp-freebsd-pkg____php81-mysqli-8.1.12 +pkgp-freebsd-pkg____php81-session-8.1.12 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/web-scvcc-rental/pkg-list-details.txt b/jails/config/web-scvcc-rental/pkg-list-details.txt index 936a561..87bcd3f 100644 --- a/jails/config/web-scvcc-rental/pkg-list-details.txt +++ b/jails/config/web-scvcc-rental/pkg-list-details.txt @@ -1,9 +1,8 @@ -pkgp-freebsd-pkg____apache24-2.4.53 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____mod_php81-8.1.4_1 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____php81-8.1.4_2 -pkgp-freebsd-pkg____php81-mysqli-8.1.4_2 -pkgp-freebsd-pkg____php81-session-8.1.4_2 -unknown-repository____pkg-1.17.5_1 +pkgp-freebsd-pkg____apache24-2.4.54 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____php81-8.1.13 +pkgp-freebsd-pkg____php81-mysqli-8.1.13 +pkgp-freebsd-pkg____php81-session-8.1.13 +pkgp-freebsd-pkg____pkg-1.18.4 diff --git a/jails/config/web-scvcc-rental/pkg-list-old.txt b/jails/config/web-scvcc-rental/pkg-list-old.txt new file mode 100644 index 0000000..943fd00 --- /dev/null +++ b/jails/config/web-scvcc-rental/pkg-list-old.txt @@ -0,0 +1 @@ +apache24 bash bash-completion nano php81 php81-mysqli php81-session pkg diff --git a/jails/config/web-scvcc-rental/pkg-list.txt b/jails/config/web-scvcc-rental/pkg-list.txt index 218188c..943fd00 100644 --- a/jails/config/web-scvcc-rental/pkg-list.txt +++ b/jails/config/web-scvcc-rental/pkg-list.txt @@ -1 +1 @@ -apache24 bash bash-completion mod_php81 nano php81 php81-mysqli php81-session pkg +apache24 bash bash-completion nano php81 php81-mysqli php81-session pkg diff --git a/jails/config/web/.well-known/matrix/server b/jails/config/web/.well-known/matrix/server new file mode 100644 index 0000000..e14ea71 --- /dev/null +++ b/jails/config/web/.well-known/matrix/server @@ -0,0 +1 @@ +{ "m.server": "matrix.ahlawat.com:8448" } diff --git a/jails/config/web/.well-known/mta-sts.txt b/jails/config/web/.well-known/mta-sts.txt new file mode 100644 index 0000000..390a591 --- /dev/null +++ b/jails/config/web/.well-known/mta-sts.txt @@ -0,0 +1,5 @@ +version: STSv1 +mode: enforce +mx: mail.ahlawat.com +mx: mail-backup.ahlawat.com +max_age: 604800 diff --git a/jails/config/web/pkg-list-details-old.txt b/jails/config/web/pkg-list-details-old.txt new file mode 100644 index 0000000..ecf1c69 --- /dev/null +++ b/jails/config/web/pkg-list-details-old.txt @@ -0,0 +1,27 @@ +pkgp123____apache24-2.4.54 +pkgp123____apr-1.7.0.1.6.1_2 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____bash-completion-2.11_1,2 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____php81-8.1.12 +pkgp-freebsd-pkg____php81-bcmath-8.1.12 +pkgp-freebsd-pkg____php81-ctype-8.1.12 +pkgp-freebsd-pkg____php81-curl-8.1.12 +pkgp-freebsd-pkg____php81-dom-8.1.12 +pkgp-freebsd-pkg____php81-exif-8.1.12 +pkgp-freebsd-pkg____php81-fileinfo-8.1.12 +pkgp-freebsd-pkg____php81-filter-8.1.12 +pkgp-freebsd-pkg____php81-ftp-8.1.12 +pkgp-freebsd-pkg____php81-gd-8.1.12 +pkgp-freebsd-pkg____php81-iconv-8.1.12 +pkgp-freebsd-pkg____php81-ldap-8.1.12 +pkgp-freebsd-pkg____php81-mbstring-8.1.12 +pkgp-freebsd-pkg____php81-mysqli-8.1.12 +pkgp-freebsd-pkg____php81-session-8.1.12 +pkgp-freebsd-pkg____php81-sockets-8.1.12 +pkgp-freebsd-pkg____php81-sodium-8.1.12 +pkgp-freebsd-pkg____php81-tokenizer-8.1.12 +pkgp-freebsd-pkg____php81-xml-8.1.12 +pkgp-freebsd-pkg____php81-zip-8.1.12 +pkgp-freebsd-pkg____php81-zlib-8.1.12 diff --git a/jails/config/web/pkg-list-details.txt b/jails/config/web/pkg-list-details.txt index e020844..9c719c1 100644 --- a/jails/config/web/pkg-list-details.txt +++ b/jails/config/web/pkg-list-details.txt @@ -1,25 +1,27 @@ -pkgp122____openldap24-client-2.4.59_4 -pkgp123____apache24-2.4.53_1 +pkgp123____apache24-2.4.54 pkgp123____apr-1.7.0.1.6.1_2 -pkgp123____php81-ldap-8.1.5 -pkgp123____pkg-1.17.5_1 -pkgp-freebsd-pkg____bash-5.1.16 -pkgp-freebsd-pkg____bash-completion-2.11_1,2 -pkgp-freebsd-pkg____nano-6.0 -pkgp-freebsd-pkg____php81-bcmath-8.1.4_2 -pkgp-freebsd-pkg____php81-ctype-8.1.4_2 -pkgp-freebsd-pkg____php81-curl-8.1.4_2 -pkgp-freebsd-pkg____php81-exif-8.1.4_2 -pkgp-freebsd-pkg____php81-fileinfo-8.1.4_2 -pkgp-freebsd-pkg____php81-filter-8.1.4_2 -pkgp-freebsd-pkg____php81-ftp-8.1.4_2 -pkgp-freebsd-pkg____php81-iconv-8.1.4_2 -pkgp-freebsd-pkg____php81-mbstring-8.1.4_2 -pkgp-freebsd-pkg____php81-mysqli-8.1.4_2 -pkgp-freebsd-pkg____php81-pdo_mysql-8.1.4_2 -pkgp-freebsd-pkg____php81-session-8.1.4_2 -pkgp-freebsd-pkg____php81-sockets-8.1.4_2 -pkgp-freebsd-pkg____php81-sodium-8.1.4_2 -pkgp-freebsd-pkg____php81-tokenizer-8.1.4_2 -pkgp-freebsd-pkg____php81-zip-8.1.4_2 -pkgp-freebsd-pkg____php81-zlib-8.1.4_2 +pkgp123____pkg-1.18.4 +pkgp-freebsd-pkg____bash-5.2.12 +pkgp-freebsd-pkg____bash-completion-2.11_2,2 +pkgp-freebsd-pkg____nano-7.0 +pkgp-freebsd-pkg____php81-8.1.13 +pkgp-freebsd-pkg____php81-bcmath-8.1.13 +pkgp-freebsd-pkg____php81-ctype-8.1.13 +pkgp-freebsd-pkg____php81-curl-8.1.13 +pkgp-freebsd-pkg____php81-dom-8.1.13 +pkgp-freebsd-pkg____php81-exif-8.1.13 +pkgp-freebsd-pkg____php81-fileinfo-8.1.13 +pkgp-freebsd-pkg____php81-filter-8.1.13 +pkgp-freebsd-pkg____php81-ftp-8.1.13 +pkgp-freebsd-pkg____php81-gd-8.1.13 +pkgp-freebsd-pkg____php81-iconv-8.1.13 +pkgp-freebsd-pkg____php81-ldap-8.1.13 +pkgp-freebsd-pkg____php81-mbstring-8.1.13 +pkgp-freebsd-pkg____php81-mysqli-8.1.13 +pkgp-freebsd-pkg____php81-session-8.1.13 +pkgp-freebsd-pkg____php81-sockets-8.1.13 +pkgp-freebsd-pkg____php81-sodium-8.1.13 +pkgp-freebsd-pkg____php81-tokenizer-8.1.13 +pkgp-freebsd-pkg____php81-xml-8.1.13 +pkgp-freebsd-pkg____php81-zip-8.1.13 +pkgp-freebsd-pkg____php81-zlib-8.1.13 diff --git a/jails/config/web/pkg-list-old.txt b/jails/config/web/pkg-list-old.txt new file mode 100644 index 0000000..c7413e7 --- /dev/null +++ b/jails/config/web/pkg-list-old.txt @@ -0,0 +1 @@ +apache24 apr bash bash-completion nano php81 php81-bcmath php81-ctype php81-curl php81-dom php81-exif php81-fileinfo php81-filter php81-ftp php81-gd php81-iconv php81-ldap php81-mbstring php81-mysqli php81-session php81-sockets php81-sodium php81-tokenizer php81-xml php81-zip php81-zlib pkg diff --git a/jails/config/web/pkg-list.txt b/jails/config/web/pkg-list.txt index 6408c39..c7413e7 100644 --- a/jails/config/web/pkg-list.txt +++ b/jails/config/web/pkg-list.txt @@ -1 +1 @@ -apache24 apr bash bash-completion nano openldap24-client php81-bcmath php81-ctype php81-curl php81-exif php81-fileinfo php81-filter php81-ftp php81-iconv php81-ldap php81-mbstring php81-mysqli php81-pdo_mysql php81-session php81-sockets php81-sodium php81-tokenizer php81-zip php81-zlib pkg +apache24 apr bash bash-completion nano php81 php81-bcmath php81-ctype php81-curl php81-dom php81-exif php81-fileinfo php81-filter php81-ftp php81-gd php81-iconv php81-ldap php81-mbstring php81-mysqli php81-session php81-sockets php81-sodium php81-tokenizer php81-xml php81-zip php81-zlib pkg diff --git a/jails/jails-update-pkgs.sh b/jails/jails-update-pkgs.sh index be20d65..7367338 100755 --- a/jails/jails-update-pkgs.sh +++ b/jails/jails-update-pkgs.sh @@ -44,19 +44,21 @@ do if [[ $i == "pkgp" || $i == "debian" ]]; then continue fi + iocage exec $i "pkg query -e "%a==0" "%n" | sort -d | xargs | tee /mnt/config/pkg-list-old.txt" + iocage exec $i "pkg query -e "%a==0" "%R____%n-%v" | sort -d | tee /mnt/config/pkg-list-details-old.txt" iocage exec $i "pkg update" - if [[ $i == "ldap" || $i == "r-ldap" ]]; then - iocage exec $i "pkg unlock -y openldap24-server" - iocage exec $i "pkg unlock -y openldap24-client" - iocage exec $i "pkg upgrade -y -r $pkg_repo openldap24-server openldap24-client" - iocage exec $i "pkg lock -y openldap24-server" - iocage exec $i "pkg lock -y openldap24-client" - fi - if [[ $i == "atm" || $i == "book" || $i == "hub" || $i == "mail" || $i == "web" ]]; then - iocage exec $i "pkg unlock -y openldap24-client" - iocage exec $i "pkg upgrade -y -r $pkg_repo openldap24-client" - iocage exec $i "pkg lock -y openldap24-client" - fi +# if [[ $i == "ldap" || $i == "r-ldap" ]]; then +# iocage exec $i "pkg unlock -y openldap24-server" +# iocage exec $i "pkg unlock -y openldap24-client" +# iocage exec $i "pkg upgrade -y -r $pkg_repo openldap24-server openldap24-client" +# iocage exec $i "pkg lock -y openldap24-server" +# iocage exec $i "pkg lock -y openldap24-client" +# fi +# if [[ $i == "atm" || $i == "book" || $i == "hub" || $i == "mail" || $i == "web" ]]; then +# iocage exec $i "pkg unlock -y openldap24-client" +# iocage exec $i "pkg upgrade -y -r $pkg_repo openldap24-client" +# iocage exec $i "pkg lock -y openldap24-client" +# fi iocage exec $i "pkg autoremove -y" iocage exec $i "pkg upgrade -y" iocage exec $i "pkg clean -ay" @@ -95,6 +97,7 @@ echo "iocage restart -s ALL" echo "" echo "check hub for index.html and adminer version" echo "" +echo "iocage exec cert \"cd /root/acme-dns;git pull\"" echo "iocage exec cert \"/root/.acme.sh/acme.sh --upgrade\"" echo "iocage exec cert \"/mnt/config/backup.sh\"" echo "" diff --git a/jails/pkg-list-details-server.txt b/jails/pkg-list-details-server.txt index 38396b5..012e4ec 100644 --- a/jails/pkg-list-details-server.txt +++ b/jails/pkg-list-details-server.txt @@ -1,31 +1,30 @@ -FreeBSD____bash-5.1.16 FreeBSD____bash-completion-2.11_1,2 -FreeBSD____debootstrap-1.0.123_6 -FreeBSD____git-2.35.1 FreeBSD____grub2-bhyve-0.40_8 -FreeBSD____htop-3.1.2 -FreeBSD____iperf3-3.11 -FreeBSD____nano-6.0 -FreeBSD____nut-2.7.4_20 -FreeBSD____pkg-1.17.5_1 -FreeBSD____py38-cython-0.29.28 -FreeBSD____py38-prometheus-client-0.13.1 -FreeBSD____py38-pycparser-2.21 -FreeBSD____py38-pysnmp-4.4.9_2 FreeBSD____rpl-1.4.1 -FreeBSD____rsync-3.2.3_1 -FreeBSD____sudo-1.9.10 FreeBSD____tftp-hpa-5.2_1 -FreeBSD____tmux-3.2a FreeBSD____wireguard-2,1 FreeBSD____xorriso-1.5.4 FreeBSD____zfsnap-1.11.1_1 FreeBSD____zfs-stats-1.3.1 -FreeBSD____zsh-5.8.1 +pkgp-freebsd-pkg____7-zip-21.07_2 +pkgp-freebsd-pkg____bash-5.2.9 +pkgp-freebsd-pkg____debootstrap-1.0.128 +pkgp-freebsd-pkg____git-2.38.1_3 +pkgp-freebsd-pkg____grc-1.13 +pkgp-freebsd-pkg____htop-3.2.1 pkgp-freebsd-pkg____i7z-0.27.4 +pkgp-freebsd-pkg____iperf3-3.12 pkgp-freebsd-pkg____mc-4.8.28 -pkgp-freebsd-pkg____node_exporter-1.3.1_1 +pkgp-freebsd-pkg____nano-6.4 +pkgp-freebsd-pkg____node_exporter-1.3.1_6 +pkgp-freebsd-pkg____nut-2.8.0_13 +pkgp-freebsd-pkg____pkg-1.18.4 pkgp-freebsd-pkg____powerdxx-0.4.4_1 pkgp-freebsd-pkg____psearch-2.1.0 +pkgp-freebsd-pkg____py39-prometheus-client-0.15.0 +pkgp-freebsd-pkg____rsync-3.2.6 pkgp-freebsd-pkg____smartmontools-7.3 -pkgp-freebsd-pkg____wget-1.21.3 +pkgp-freebsd-pkg____sudo-1.9.12p1 +pkgp-freebsd-pkg____tmux-3.3a +pkgp-freebsd-pkg____wget-1.21.3_1 +pkgp-freebsd-pkg____zsh-5.9_1 diff --git a/jails/pkg-list-server.txt b/jails/pkg-list-server.txt index 286551d..cb53671 100644 --- a/jails/pkg-list-server.txt +++ b/jails/pkg-list-server.txt @@ -1 +1 @@ -bash bash-completion debootstrap git grub2-bhyve htop i7z iperf3 mc nano node_exporter nut pkg powerdxx psearch py38-cython py38-prometheus-client py38-pycparser py38-pysnmp rpl rsync smartmontools sudo tftp-hpa tmux wget wireguard xorriso zfsnap zfs-stats zsh +7-zip bash bash-completion debootstrap git grc grub2-bhyve htop i7z iperf3 mc nano node_exporter nut pkg powerdxx psearch py39-prometheus-client rpl rsync smartmontools sudo tftp-hpa tmux wget wireguard xorriso zfsnap zfs-stats zsh diff --git a/jails/update.sh b/jails/update.sh index 4ea66f8..76fbed8 100755 --- a/jails/update.sh +++ b/jails/update.sh @@ -8,18 +8,15 @@ # # -SWREL="12.3-RELEASE" -SWRELOLD="12.2-RELEASE" -SWRELOLD_patch="12.2-RELEASE-p10" -pkg_jail="pj123" +SWREL="12.4-RELEASE" +SWRELOLD="12.3-RELEASE" +SWRELOLD_patch="12.3-RELEASE-p8" +pkg_jail="pj124" +pkg_jailOLD="pj123" -if [[ $1 == "upgrade" ]]; then - echo "#### creation of $SWREL called" -# iocage fetch -NU -r $SWREL -fi # NOTE: first time for new SWREL -# remember to update pkgp.conf files +# remember to update pkgp.conf files to new pkg_jail # find ./ | grep pkgp.conf | sort update_jail () @@ -38,14 +35,14 @@ update_jail () if [[ $1 == "upgrade" ]]; then # FAILING: iocage upgrade -r $SWREL $JAIL - # freebsd-update -r 12.3-RELEASE -j 8 upgrade - # freebsd-update -r 12.3-RELEASE -j 8 install - # freebsd-update -r 12.3-RELEASE -j 8 install + # freebsd-update -r $SWREL -j 8 upgrade + # freebsd-update -r $SWREL -j 8 install + # freebsd-update -r $SWREL -j 8 install freebsd-update --currently-running $SWRELOLD -r $SWREL -b /mnt/iocage/jails/$JAIL/root -d /mnt/iocage/jails/$JAIL/root/var/db/freebsd-update -f /mnt/iocage/jails/$JAIL/root/etc/freebsd-update.conf --not-running-from-cron upgrade freebsd-update --currently-running $SWRELOLD -r $SWREL -b /mnt/iocage/jails/$JAIL/root -d /mnt/iocage/jails/$JAIL/root/var/db/freebsd-update -f /mnt/iocage/jails/$JAIL/root/etc/freebsd-update.conf --not-running-from-cron install # post reboot install, reboot not required in jails freebsd-update --currently-running $SWRELOLD -r $SWREL -b /mnt/iocage/jails/$JAIL/root -d /mnt/iocage/jails/$JAIL/root/var/db/freebsd-update -f /mnt/iocage/jails/$JAIL/root/etc/freebsd-update.conf --not-running-from-cron install - # iocage update fetches update based on string in json which used to get updated as part of the upfrade workflow + # iocage update fetches update based on string in json which used to get updated as part of the upgrade workflow cd /mnt/iocage/jails/$JAIL rpl '"release": "${SWRELOLD_patch}"' '"release": "${SWREL}"' config.json iocage update $JAIL @@ -79,32 +76,37 @@ update_jail () read -p "skip initial preparation steps (y/N)? " RESP if [ -z $RESP ] || [ $RESP == "n" ] || [ $RESP == "N" ]; then -#iocage freebsd-update is failing in jails -if [[ $1 == "upgrade" ]]; then - echo "#### update of $SWREL called" -# iocage fetch -U -r $SWREL -fi -echo "#### iocage root - updating" -freebsd-update --currently-running $SWREL -b /mnt/iocage/releases/$SWREL/root -d /mnt/iocage/releases/$SWREL/root/var/db/freebsd-update -f /mnt/iocage/releases/$SWREL/root/etc/freebsd-update.conf fetch -freebsd-update --currently-running $SWREL -b /mnt/iocage/releases/$SWREL/root -d /mnt/iocage/releases/$SWREL/root/var/db/freebsd-update -f /mnt/iocage/releases/$SWREL/root/etc/freebsd-update.conf install + if [[ $1 == "upgrade" ]]; then + echo "#### update of $SWREL called" + iocage fetch -NU -r $SWREL + fi -echo "#### iocage root - cleaning update directory" -rm -rf /mnt/iocage/releases/$SWREL/root/var/db/freebsd-update -mkdir -p /mnt/iocage/releases/$SWREL/root/var/db/freebsd-update/files + #iocage freebsd-update is failing in jails + echo "#### iocage root - updating" + freebsd-update --currently-running $SWREL -b /mnt/iocage/releases/$SWREL/root -d /mnt/iocage/releases/$SWREL/root/var/db/freebsd-update -f /mnt/iocage/releases/$SWREL/root/etc/freebsd-update.conf fetch + freebsd-update --currently-running $SWREL -b /mnt/iocage/releases/$SWREL/root -d /mnt/iocage/releases/$SWREL/root/var/db/freebsd-update -f /mnt/iocage/releases/$SWREL/root/etc/freebsd-update.conf install -echo "#### preparing etcupdate archive" -### etcupdate build $SWREL.bzip2 -### mv $SWREL.bzip2 /root/FreeBSD/jails/config/common/ + echo "#### preparing etcupdate archive" + etcupdate build $SWREL.bzip2 -s /mnt/iocage/releases/$SWREL/root/usr/src + mv $SWREL.bzip2 /root/FreeBSD/jails/config/common/ -echo "#### preparing poudriere jail - okay to delete poudriere build jail when prompted" -cp -r /mnt/iocage/releases/$SWREL /zroot/pkgp -iocage exec pkgp "poudriere jail -d -j $pkg_jail" -iocage exec pkgp "poudriere jail -c -j $pkg_jail -m null -M /mnt/cache/$SWREL/root -v $SWREL" # zroot/pkgp is mounted under /mnt/cache -iocage exec pkgp "poudriere jail -i -j $pkg_jail" -# check options are updated in /usr/local/etc/poudriere.d/$pkg_jail-options + echo "#### iocage root - cleaning update directory" + rm -rf /mnt/iocage/releases/$SWREL/root/var/db/freebsd-update + mkdir -p /mnt/iocage/releases/$SWREL/root/var/db/freebsd-update/files -read -p "update pkgp packages first (y/N)? " RESP -if [ ! -z $RESP ] && [ $RESP == "y" ]; then + echo "#### preparing poudriere jail - okay to delete poudriere build jail when prompted" + cp -r /mnt/iocage/releases/$SWREL /zroot/pkgp + if [[ $1 == "upgrade" ]]; then + iocage exec pkgp "poudriere jail -d -j $pkg_jailOLD" + else + iocage exec pkgp "poudriere jail -d -j $pkg_jail" + fi + iocage exec pkgp "poudriere jail -c -j $pkg_jail -m null -M /mnt/cache/$SWREL/root -v $SWREL" # zroot/pkgp is mounted under /mnt/cache + iocage exec pkgp "poudriere jail -i -j $pkg_jail" + # check options are updated in /usr/local/etc/poudriere.d/$pkg_jail-options + + read -p "update pkgp packages first (y/N)? " RESP + if [ ! -z $RESP ] && [ $RESP == "y" ]; then if [[ $1 == "upgrade" ]]; then JAIL="pkgp" read -p "upgrade jail $JAIL (y/N)? " RESP @@ -117,7 +119,7 @@ fi fi -read -p "update all jails (y/N)? " RESP +read -p "process all jails (y/N)? " RESP if [ ! -z $RESP ] && [ $RESP == "y" ]; then # for JAIL in `iocage list -h | cut -f2`; for JAIL in `jls -N | cut -d " " -f 2 | cut -d "-" -f 2- | grep -v JID | sort`; @@ -135,27 +137,20 @@ if [ ! -z $RESP ] && [ $RESP == "y" ]; then done fi -echo "update base system by running:" - -echo "freebsd-update fetch" -# echo "freebsd-update upgrade -r $SWREL" - -echo "freebsd-update install" -# echo "pkg bootstrap -f ; pkg update ; pkg upgrade" +echo "update -OR- upgrade base system by running:" +echo "freebsd-update fetch -OR- freebsd-update upgrade -r $SWREL" +echo "freebsd-update install -OR- pkg bootstrap -f ; pkg update ; pkg upgrade" # echo "rm -rf /usr/src.old; cp -r /usr/src /usr/src.old; rm -rf /usr/src/*" -# echo "git clone --branch releng/12.3 https://git.FreeBSD.org/src.git /usr/src" +# echo "git clone --depth 1 --branch releng/12.3 https://git.FreeBSD.org/src.git /usr/src" # echo "cd /usr/src; cp ../../../../src.old/sys/amd64/conf/diyIT ." - echo "cd /usr/src; git pull; make -j8 buildkernel KERNCONF=diyIT && make -j8 installkernel KERNCONF=diyIT" - echo "reboot" echo "pkg-static upgrade -f" #echo "rm -rf /var/tmp/temproot*" #echo "mergemaster -a" - -echo "etcupdate -t /mnt/common/$SWREL.bzip2" +echo "etcupdate" echo "/root/FreeBSD/scripts/zfs-prune-snapshots -vn -p 'ioc_update' 1d | grep removing"