root
5 years ago
20 changed files with 699 additions and 45 deletions
@ -0,0 +1,94 @@ |
|||
### |
|||
### Build Variables |
|||
### |
|||
FROM localhost/debian:latest |
|||
|
|||
# deploy options |
|||
# -p (port) and -v (volume) both go host:container |
|||
LABEL deployopts="\ |
|||
-p 9081:80 \ |
|||
-p 9022:22 \ |
|||
-v /tank/files/git:/vol/git \ |
|||
-v /tank/files/db/gitea:/vol/db" |
|||
# make sure mount directories exist |
|||
RUN mkdir -p /vol/git /vol/db |
|||
|
|||
# version of postgres |
|||
ARG psqlv=11 |
|||
# uid that the files owner user should have |
|||
ARG FILESUID=5000 |
|||
|
|||
# Container Variables |
|||
# database name and user |
|||
ENV DBUSER=gtadmin |
|||
ENV DBNAME=gitea |
|||
# put environment variables in /etc/environment so we can access them from cron scripts |
|||
RUN echo "DBUSER=$DBUSER" >> /etc/environment && \ |
|||
echo "DBNAME=$DBNAME" >> /etc/environment |
|||
|
|||
### |
|||
### General Setup |
|||
### |
|||
|
|||
# install packages we want |
|||
RUN apt update -y && apt install -y postgresql postgresql-doc git |
|||
|
|||
# create gitea user with file owner UID |
|||
RUN addgroup --gid $FILESUID gitea && \ |
|||
adduser gitea --ingroup gitea --uid $FILESUID --disabled-password --gecos "Gitea Server" --shell /usr/sbin/nologin |
|||
|
|||
# copy our custom scripts |
|||
COPY resources/bin/ /usr/local/bin/ |
|||
|
|||
### |
|||
### PostgreSQL ### |
|||
### |
|||
|
|||
# configure PostgreSQL access |
|||
COPY --chown=postgres:postgres resources/pg_hba.conf /etc/postgresql/${psqlv}/main/pg_hba.conf |
|||
|
|||
### |
|||
### Gitea |
|||
### |
|||
|
|||
# dowload gitea |
|||
RUN wget https://dl.gitea.io/gitea/master/gitea-master-linux-amd64 && \ |
|||
mv gitea-master-linux-amd64 /usr/local/bin/gitea && \ |
|||
chmod +x /usr/local/bin/gitea |
|||
|
|||
# make directories gitea needs |
|||
RUN mkdir -p /var/lib/gitea/ && \ |
|||
cd /var/lib/gitea/ && \ |
|||
mkdir custom data log && \ |
|||
chown -R gitea:gitea /var/lib/gitea/ && \ |
|||
chmod -R 750 /var/lib/gitea/ |
|||
|
|||
# copy gitea config template |
|||
COPY resources/app.ini.esh /etc/gitea/ |
|||
# template config file |
|||
RUN cd /etc/gitea/ && \ |
|||
esh app.ini.esh > app.ini && \ |
|||
rm app.ini.esh && \ |
|||
chmod -R +r /etc/gitea/ |
|||
|
|||
COPY resources/gitea.service /etc/systemd/system/ |
|||
|
|||
### |
|||
### Crontab |
|||
### |
|||
COPY resources/crontab /root/ |
|||
RUN crontab -u gitea /root/crontab |
|||
|
|||
### |
|||
### Systemdfile |
|||
### |
|||
COPY Systemdfile /root/ |
|||
RUN chmod +x /root/Systemdfile |
|||
|
|||
### |
|||
### Bugfix |
|||
### |
|||
|
|||
# execute command to workaround bug in cron |
|||
COPY bugfix/cronfix /root/ |
|||
RUN chmod +x /root/cronfix && /root/cronfix |
|||
@ -0,0 +1,14 @@ |
|||
#!/bin/bash |
|||
|
|||
# fail if any command returns error |
|||
set -e |
|||
set -x |
|||
# wait 5 seconds to make sure all services have finished starting up |
|||
sleep 5 |
|||
|
|||
# make database for gitea |
|||
db-make |
|||
|
|||
# enable and start gitea |
|||
systemctl enable gitea |
|||
systemctl start gitea |
|||
@ -0,0 +1,2 @@ |
|||
#!/bin/sh |
|||
sed -i '/session required pam_loginuid.so/c\#session required pam_loginuid.so' /etc/pam.d/cron |
|||
@ -0,0 +1,69 @@ |
|||
APP_NAME = Gitea: Git with a cup of tea |
|||
RUN_USER = gitea |
|||
RUN_MODE = prod |
|||
|
|||
[oauth2] |
|||
JWT_SECRET = <%= $(gitea generate secret JWT_SECRET) %> |
|||
|
|||
[security] |
|||
INTERNAL_TOKEN = <%= $(gitea generate secret INTERNAL_TOKEN) %> |
|||
INSTALL_LOCK = true |
|||
SECRET_KEY = <%= $(gitea generate secret SECRET_KEY) %> |
|||
; disable password complexity checks |
|||
PASSWORD_COMPLEXITY = off |
|||
|
|||
[database] |
|||
DB_TYPE = postgres |
|||
HOST = /var/run/postgresql |
|||
NAME = gitea |
|||
USER = gtadmin |
|||
PASSWD = |
|||
SSL_MODE = disable |
|||
CHARSET = utf8 |
|||
PATH = /var/lib/gitea/data/gitea.db |
|||
|
|||
[repository] |
|||
ROOT = /vol/git/repos |
|||
|
|||
[server] |
|||
DOMAIN = medusa.alemor.org |
|||
ROOT_URL = http://medusa.casa.alemor.org/git/ |
|||
HTTP_PORT = 80 |
|||
START_SSH_SERVER = true |
|||
SSH_PORT = 9022 |
|||
SSH_LISTEN_PORT = 22 |
|||
LFS_START_SERVER = trxue |
|||
LFS_CONTENT_PATH = /vol/git/lfs |
|||
LFS_JWT_SECRET = <%= $(gitea generate secret JWT_SECRET) %> |
|||
OFFLINE_MODE = true |
|||
|
|||
[mailer] |
|||
ENABLED = false |
|||
|
|||
[service] |
|||
REGISTER_EMAIL_CONFIRM = false |
|||
ENABLE_NOTIFY_MAIL = false |
|||
DISABLE_REGISTRATION = true |
|||
ALLOW_ONLY_EXTERNAL_REGISTRATION = false |
|||
ENABLE_CAPTCHA = false |
|||
REQUIRE_SIGNIN_VIEW = false |
|||
DEFAULT_KEEP_EMAIL_PRIVATE = false |
|||
DEFAULT_ALLOW_CREATE_ORGANIZATION = false |
|||
DEFAULT_ENABLE_TIMETRACKING = true |
|||
NO_REPLY_ADDRESS = noreply.localhost |
|||
|
|||
[picture] |
|||
DISABLE_GRAVATAR = true |
|||
ENABLE_FEDERATED_AVATAR = false |
|||
|
|||
[openid] |
|||
ENABLE_OPENID_SIGNIN = true |
|||
ENABLE_OPENID_SIGNUP = false |
|||
|
|||
[session] |
|||
PROVIDER = file |
|||
|
|||
[log] |
|||
MODE = file |
|||
LEVEL = info |
|||
ROOT_PATH = /var/lib/gitea/log |
|||
@ -0,0 +1,2 @@ |
|||
#!/bin/bash |
|||
pg_dump -O -U $DBUSER -d $DBNAME -f $1 |
|||
@ -0,0 +1,3 @@ |
|||
#!/bin/bash |
|||
db-make |
|||
psql -U $DBUSER -d $DBNAME -f $1 |
|||
@ -0,0 +1,12 @@ |
|||
#!/bin/bash |
|||
|
|||
cmd() { |
|||
sudo -u postgres psql -c "$1" |
|||
} |
|||
|
|||
cd /var/lib/postgresql |
|||
cmd "DROP DATABASE IF EXISTS $DBNAME;" |
|||
cmd "DROP USER IF EXISTS $DBUSER;" |
|||
cmd "CREATE USER $DBUSER;" |
|||
cmd "CREATE DATABASE $DBNAME WITH TEMPLATE template0 ENCODING UTF8 LC_COLLATE 'C.UTF-8' LC_CTYPE 'C.UTF-8';" |
|||
cmd "GRANT ALL PRIVILEGES ON DATABASE $DBNAME TO $DBUSER;" |
|||
@ -0,0 +1,366 @@ |
|||
#!/bin/sh |
|||
# vim: set ts=4: |
|||
#---help--- |
|||
# USAGE: |
|||
# esh [options] [--] <input> [<variable>...] |
|||
# esh <-h | -V> |
|||
# |
|||
# Process and evaluate an ESH template. |
|||
# |
|||
# ARGUMENTS: |
|||
# <input> Path of the template file or "-" to read from STDIN. |
|||
# <variable> Variable(s) specified as <name>=<value> to pass into the |
|||
# template (the have higher priority than environment |
|||
# variables). |
|||
# |
|||
# OPTIONS: |
|||
# -d Don't evaluate template, just dump a shell script. |
|||
# -o <file> Output file or "-" for STDOUT. Defaults to "-". |
|||
# -s <shell> Command name or path of the shell to use for template |
|||
# evaluation. It must not contain spaces. |
|||
# Defaults to "/bin/sh". |
|||
# -h Show this help message and exit. |
|||
# -V Print version and exit. |
|||
# |
|||
# ENVIRONMENT: |
|||
# ESH_AWK Command name of path of the awk program to use. |
|||
# It must not contain spaces. Defaults to "awk". |
|||
# ESH_MAX_DEPTH Maximum include depth. Defaults to 3. |
|||
# ESH_SHELL Same as -s. |
|||
# |
|||
# EXIT STATUS: |
|||
# 0 Clean exit, no error has encountered. |
|||
# 1 Generic error. |
|||
# 10 Invalid usage. |
|||
# 11 ESH syntax error. |
|||
# 12 Include error: file not found. |
|||
# 13 Include error: exceeded max include depth (ESH_MAX_DEPTH). |
|||
# |
|||
# Please report bugs at <https://github.com/jirutka/esh/issues>. |
|||
#---help--- |
|||
set -eu |
|||
|
|||
readonly PROGNAME='esh' |
|||
readonly VERSION='0.3.0' |
|||
readonly SCRIPTPATH="$0" |
|||
|
|||
AWK_CONVERTER=$(cat <<'AWK' |
|||
function fail(code, msg) { |
|||
state = "ERROR" |
|||
# FIXME: /dev/stderr is not portable |
|||
printf("%s: %s\n", line_info(), msg) > "/dev/stderr" |
|||
exit code |
|||
} |
|||
function line_info() { |
|||
return FILENAME ? (filenames[depth] ":" linenos[depth]) : "(init)" # (init) if inside BEGIN |
|||
} |
|||
# IMPORTANT: This is the only function that should print a newline. |
|||
function puts(str) { |
|||
print(line_info()) > MAP_FILE |
|||
print(str) |
|||
} |
|||
function fputs(str) { |
|||
printf("%s", str) |
|||
} |
|||
function trim(str) { |
|||
gsub(/^[ \t\r\n]+|[ \t\r\n]+$/, "", str) |
|||
return str |
|||
} |
|||
function read(len, _str) { |
|||
if (len == "") { |
|||
_str = buff |
|||
buff = "" |
|||
} else if (len > 0) { |
|||
_str = substr(buff, 1, len) |
|||
buff = substr(buff, len + 1, length(buff)) |
|||
} |
|||
return _str |
|||
} |
|||
function skip(len) { |
|||
buff = substr(buff, len + 1, length(buff)) |
|||
} |
|||
function flush(len, _str) { |
|||
_str = read(len) |
|||
|
|||
if (state == "TEXT") { |
|||
gsub("'", "'\\''", _str) |
|||
} |
|||
if (state != "COMMENT") { |
|||
fputs(_str) |
|||
} |
|||
} |
|||
function file_exists(filename, _junk) { |
|||
if ((getline _junk < filename) >= 0) { |
|||
close(filename) |
|||
return 1 |
|||
} |
|||
return 0 |
|||
} |
|||
function dirname(path) { |
|||
return sub(/\/[^\/]+\/*$/, "/", path) ? path : "" |
|||
} |
|||
function include(filename) { |
|||
if (index(filename, "/") != 1) { # if does not start with "/" |
|||
filename = dirname(filenames[depth]) filename |
|||
} |
|||
if (!file_exists(filename)) { |
|||
fail(12, "cannot include " filename ": not a file or not readable") |
|||
} |
|||
if (depth > MAX_DEPTH) { |
|||
fail(13, "cannot include " filename ": exceeded maximum depth of " MAX_DEPTH) |
|||
} |
|||
buffs[depth] = buff |
|||
states[depth] = state |
|||
filenames[depth + 1] = filename |
|||
depth++ |
|||
|
|||
init() |
|||
while ((getline buff < filename) > 0) { |
|||
if (print_nl && state != "COMMENT") { |
|||
puts("") |
|||
} |
|||
process_line() |
|||
} |
|||
end_text() |
|||
close(filename) |
|||
|
|||
depth-- |
|||
buff = buffs[depth] |
|||
state = states[depth] |
|||
} |
|||
function init() { |
|||
buff = "" |
|||
linenos[depth] = 0 |
|||
print_nl = 0 |
|||
start_text() |
|||
} |
|||
function start_text() { |
|||
puts("") |
|||
fputs("printf '%s' '") |
|||
state = "TEXT" |
|||
} |
|||
function end_text() { |
|||
if (state != "TEXT") { return } |
|||
puts("' #< " line_info()) |
|||
state = "UNDEF" |
|||
} |
|||
function process_line() { |
|||
linenos[depth]++ |
|||
|
|||
while (buff != "") { |
|||
print_nl = 1 |
|||
|
|||
if (state == "TEXT" && match(buff, /<%/)) { |
|||
flush(RSTART - 1) # print buff before "<%" |
|||
skip(2) # skip "<%" |
|||
|
|||
flag = substr(buff, 1, 1) |
|||
if (flag != "%") { |
|||
end_text() |
|||
} |
|||
if (flag == "%") { # <%% |
|||
skip(1) |
|||
fputs("<%") |
|||
} else if (flag == "=") { # <%= |
|||
skip(1) |
|||
fputs("__print ") |
|||
state = "TAG" |
|||
} else if (flag == "+") { # <%+ |
|||
if (!match(buff, /[^%]%>/)) { |
|||
fail(11, "syntax error: <%+ must be closed on the same line") |
|||
} |
|||
filename = trim(substr(buff, 2, match(buff, /.-?%>/) - 1)) |
|||
skip(RSTART) |
|||
include(filename) |
|||
state = "TAG" |
|||
} else if (flag == "#") { # <%# |
|||
state = "COMMENT" |
|||
} else { |
|||
state = "TAG" |
|||
} |
|||
} else if (state != "TEXT" && match(buff, /%>/)) { |
|||
flag = RSTART > 1 ? substr(buff, RSTART - 1, 1) : "" |
|||
|
|||
if (flag == "%") { # %%> |
|||
flush(RSTART - 2) |
|||
skip(1) |
|||
flush(2) |
|||
} else if (flag == "-") { # -%> |
|||
flush(RSTART - 2) |
|||
skip(3) |
|||
print_nl = 0 |
|||
} else { # %> |
|||
flush(RSTART - 1) |
|||
skip(2) |
|||
} |
|||
if (flag != "%") { |
|||
start_text() |
|||
} |
|||
} else { |
|||
flush() |
|||
} |
|||
} |
|||
} |
|||
BEGIN { |
|||
FS = "" |
|||
depth = 0 |
|||
|
|||
puts("#!" (SHELL ~ /\// ? SHELL : "/usr/bin/env " SHELL)) |
|||
puts("set -eu") |
|||
puts("if ( set -o pipefail 2>/dev/null ); then set -o pipefail; fi") |
|||
puts("__print() { printf '%s' \"$*\"; }") |
|||
|
|||
split(VARS, _lines, /\n/) |
|||
for (_i in _lines) { |
|||
puts(_lines[_i]) |
|||
} |
|||
init() |
|||
} |
|||
{ |
|||
if (NR == 1) { |
|||
filenames[0] = FILENAME # this var is not defined in BEGIN so we must do it here |
|||
} |
|||
buff = $0 |
|||
process_line() |
|||
|
|||
if (print_nl && state != "COMMENT") { |
|||
puts("") |
|||
} |
|||
} |
|||
END { |
|||
end_text() |
|||
} |
|||
AWK |
|||
) |
|||
AWK_ERR_FILTER=$(cat <<'AWK' |
|||
function line_info(lno, _line, _i) { |
|||
while ((getline _line < MAPFILE) > 0 && _i++ < lno) { } |
|||
close(MAPFILE) |
|||
return _line |
|||
} |
|||
{ |
|||
if (match($0, "^" SRCFILE ":( line)? ?[0-9]+:") && match(substr($0, 1, RLENGTH), /[0-9]+:$/)) { |
|||
lno = substr($0, RSTART, RLENGTH - 1) + 0 |
|||
msg = substr($0, RSTART + RLENGTH + 1) # v-- some shells duplicate filename |
|||
msg = index(msg, SRCFILE ":") == 1 ? substr(msg, length(SRCFILE) + 3) : msg |
|||
print(line_info(lno) ": " msg) |
|||
} else if ($0 != "") { |
|||
print($0) |
|||
} |
|||
} |
|||
AWK |
|||
) |
|||
readonly AWK_CONVERTER AWK_ERR_FILTER |
|||
|
|||
print_help() { |
|||
sed -En '/^#---help---/,/^#---help---/p' "$SCRIPTPATH" | sed -E 's/^# ?//; 1d;$d;' |
|||
} |
|||
|
|||
filter_shell_stderr() { |
|||
$ESH_AWK \ |
|||
-v SRCFILE="$1" \ |
|||
-v MAPFILE="$2" \ |
|||
-- "$AWK_ERR_FILTER" |
|||
} |
|||
|
|||
evaluate() { |
|||
local srcfile="$1" |
|||
local mapfile="$2" |
|||
|
|||
# This FD redirection magic is for swapping stdout/stderr back and forth. |
|||
exec 3>&1 |
|||
{ set +e; $ESH_SHELL "$srcfile" 2>&1 1>&3; echo $? >>"$mapfile"; } \ |
|||
| filter_shell_stderr "$srcfile" "$mapfile" >&2 |
|||
exec 3>&- |
|||
|
|||
return $(tail -n 1 "$mapfile") |
|||
} |
|||
|
|||
convert() { |
|||
local input="$1" |
|||
local vars="$2" |
|||
local map_file="${3:-"/dev/null"}" |
|||
|
|||
$ESH_AWK \ |
|||
-v MAX_DEPTH="$ESH_MAX_DEPTH" \ |
|||
-v SHELL="$ESH_SHELL" \ |
|||
-v MAP_FILE="$map_file" \ |
|||
-v VARS="$vars" \ |
|||
-- "$AWK_CONVERTER" "$input" |
|||
} |
|||
|
|||
process() { |
|||
local input="$1" |
|||
local vars="$2" |
|||
local evaluate="${3:-yes}" |
|||
local ret=0 tmpfile mapfile |
|||
|
|||
if [ "$evaluate" = yes ]; then |
|||
tmpfile=$(mktemp) |
|||
mapfile=$(mktemp) |
|||
|
|||
convert "$input" "$vars" "$mapfile" > "$tmpfile" || ret=$? |
|||
test $ret -ne 0 || evaluate "$tmpfile" "$mapfile" || ret=$? |
|||
|
|||
rm -f "$tmpfile" "$mapfile" |
|||
else |
|||
convert "$input" "$vars" || ret=$? |
|||
fi |
|||
return $ret |
|||
} |
|||
|
|||
: ${ESH_AWK:="awk"} |
|||
: ${ESH_MAX_DEPTH:=3} |
|||
: ${ESH_SHELL:="/bin/sh"} |
|||
EVALUATE='yes' |
|||
OUTPUT='' |
|||
|
|||
while getopts ':dho:s:V' OPT; do |
|||
case "$OPT" in |
|||
d) EVALUATE=no;; |
|||
h) print_help; exit 0;; |
|||
o) OUTPUT="$OPTARG";; |
|||
s) ESH_SHELL="$OPTARG";; |
|||
V) echo "$PROGNAME $VERSION"; exit 0;; |
|||
'?') echo "$PROGNAME: unknown option: -$OPTARG" >&2; exit 10;; |
|||
esac |
|||
done |
|||
shift $(( OPTIND - 1 )) |
|||
|
|||
if [ $# -eq 0 ]; then |
|||
printf "$PROGNAME: %s\n\n" 'missing argument <input>' >&2 |
|||
print_help >&2 |
|||
exit 10 |
|||
fi |
|||
|
|||
INPUT="$1"; shift |
|||
[ "$INPUT" != '-' ] || INPUT='' |
|||
if [ "$INPUT" ] && ! [ -f "$INPUT" -a -r "$INPUT" ]; then |
|||
echo "$PROGNAME: can't read $INPUT: not a file or not readable" >&2; exit 10 |
|||
fi |
|||
|
|||
# Validate arguments. |
|||
for arg in "$@"; do |
|||
case "$arg" in |
|||
*=*) ;; |
|||
*) echo "$PROGNAME: illegal argument: $arg" >&2; exit 10;; |
|||
esac |
|||
done |
|||
|
|||
# Format variables into shell variable assignments. |
|||
vars=''; for item in "$@"; do |
|||
vars="$vars\n${item%%=*}='$( |
|||
printf %s "${item#*=}" | $ESH_AWK "{ gsub(/'/, \"'\\\\\\\''\"); print }" |
|||
)'" |
|||
done |
|||
|
|||
export ESH="$0" |
|||
|
|||
if [ "${OUTPUT#-}" ]; then |
|||
tmpfile="$(mktemp)" |
|||
trap "rm -f '$tmpfile'" EXIT HUP INT TERM |
|||
process "$INPUT" "$vars" "$EVALUATE" > "$tmpfile" |
|||
mv "$tmpfile" "$OUTPUT" |
|||
else |
|||
process "$INPUT" "$vars" "$EVALUATE" |
|||
fi |
|||
@ -0,0 +1,41 @@ |
|||
#!/bin/bash |
|||
|
|||
# load environment variables |
|||
source /etc/environment |
|||
|
|||
hour=$(date +%H) |
|||
day=$(date +%d) |
|||
month=$(date +%m) |
|||
year=$(date +%Y) |
|||
|
|||
dumpdir=/vol/db |
|||
errlog=error/$year-$month-$day-T$hour.log |
|||
|
|||
mkdir -p $dumpdir/error |
|||
cd $dumpdir |
|||
|
|||
if [[ $# -lt 2 ]]; then |
|||
echo "Error: called with missing hour and/or day parameter. Script exited without running." | tee $errlog |
|||
exit 1 |
|||
fi |
|||
|
|||
if [[ $hour == $1 ]]; then |
|||
nc-occ maintenance:mode --on |
|||
fi |
|||
|
|||
db-dump $DBNAME-hourly-$hour.sql 2>> $errlog |
|||
|
|||
if [[ $hour == $1 ]]; then |
|||
nc-occ maintenance:mode --off |
|||
mv $DBNAME-hourly-$hour.sql $DBNAME-daily-$day.sql 2>> $errlog |
|||
|
|||
if [[ $day == $2 ]]; then |
|||
mv $DBNAME-daily-$day.sql $DBNAME-$year-$month-$day.sql 2>> $errlog |
|||
fi |
|||
fi |
|||
|
|||
# If error log is size 0, erase it because I don't like seeing it |
|||
if [[ ! -s $errlog ]]; then |
|||
rm $errlog |
|||
rmdir --ignore-fail-on-non-empty error |
|||
fi |
|||
@ -0,0 +1,5 @@ |
|||
PATH=/usr/local/bin:/bin:/usr/bin |
|||
# m h dom mon dow command |
|||
|
|||
# Dump database every hour |
|||
23 * * * * maint 01 01 |
|||
@ -0,0 +1,33 @@ |
|||
[Unit] |
|||
Description=Gitea (Git with a cup of tea) |
|||
After=syslog.target |
|||
After=network.target |
|||
Requires=postgresql.service |
|||
|
|||
[Service] |
|||
# Modify these two values and uncomment them if you have |
|||
# repos with lots of files and get an HTTP error 500 because |
|||
# of that |
|||
### |
|||
#LimitMEMLOCK=infinity |
|||
#LimitNOFILE=65535 |
|||
RestartSec=2s |
|||
Type=simple |
|||
User=gitea |
|||
Group=gitea |
|||
WorkingDirectory=/var/lib/gitea/ |
|||
# If using Unix socket: tells systemd to create the /run/gitea folder, which will contain the gitea.sock file |
|||
# (manually creating /run/gitea doesn't work, because it would not persist across reboots) |
|||
#RuntimeDirectory=gitea |
|||
ExecStart=/usr/local/bin/gitea web --config /etc/gitea/app.ini |
|||
Restart=always |
|||
Environment=USER=gitea HOME=/home/gitea GITEA_WORK_DIR=/var/lib/gitea |
|||
# If you want to bind Gitea to a port below 1024, uncomment |
|||
# the two values below, or use socket activation to pass Gitea its ports as above |
|||
### |
|||
CapabilityBoundingSet=CAP_NET_BIND_SERVICE |
|||
AmbientCapabilities=CAP_NET_BIND_SERVICE |
|||
### |
|||
|
|||
[Install] |
|||
WantedBy=multi-user.target |
|||
@ -0,0 +1 @@ |
|||
local all all trust |
|||
@ -0,0 +1,2 @@ |
|||
#!/bin/sh |
|||
sed -i '/session required pam_loginuid.so/c\#session required pam_loginuid.so' /etc/pam.d/cron |
|||
@ -1,8 +1,11 @@ |
|||
PATH=/usr/local/bin:/bin:/usr/bin |
|||
# m h dom mon dow command |
|||
|
|||
# Run Nextcloud cron tasks every 5 minutes |
|||
*/5 * * * * php -f /var/www/html/nextcloud/cron.php |
|||
# Dump database every hour |
|||
10 * * * * maint 01 01 |
|||
|
|||
# Scan for new files every 15 minutes |
|||
*/15 * * * * nc-occ files:scan --all |
|||
|
|||
# Dump database every hour |
|||
23 * * * * maint 01 01 |
|||
|
|||
Loading…
Reference in new issue