forgejo helm

No introduction found. Create it?

Install

Install with:

helm repo add forgejo oci://code.forgejo.org/forgejo-helm/forgejo
helm install forgejo forgejo/forgejo -f values.yaml

Examples

See examples from other people.

Top Repositories (2 out of 21)

NameRepoStarsVersionTimestamp
forgejoangelnu/k8s-gitops18216.2.012 days ago
forgejodrag0n141/home-ops5216.2.0a month ago

Resources

100Mi128Mi237Mi256Mi512Mi1024Mi2048Mi4096Mi
237Mi512Mi1024Mi2048Mi4096Mi24576Mi
10m15m50m100m500m

Values

See the most popular values for this chart:

KeyTypes
gitea.config.database.DB_TYPE (17)
postgres
string
gitea.config.database.HOST (7)
postgres17-rw.database.svc.cluster.local:5432
string
gitea.config.database.SSL_MODE (7)
disable
string
gitea.config.database.NAME (5)
forgejo
string
gitea.config.database.SCHEMA (3)
public
string
gitea.config.database.LOG_SQL (2)
false
boolean
gitea.config.database.SLOW_QUERY_THRESHOLD (2)
5s
string
gitea.config.database.USER (2)
forgejo
string
gitea.config.database.MAX_OPEN_CONNS (1)
10
number
gitea.config.database.PASSWD (1)
${POSTGRES_FORGEJO_PASSWORD}
string
gitea.config.database.PATH (1)
/data/gitea.db
string
gitea.config.database.SQLITE_JOURNAL_MODE (1)
wal
string
gitea.config.service.DISABLE_REGISTRATION (16)
true
boolean
gitea.config.service.ALLOW_ONLY_EXTERNAL_REGISTRATION (9)
true
boolean
gitea.config.service.SHOW_REGISTRATION_BUTTON (8)
false
boolean
gitea.config.service.DEFAULT_KEEP_EMAIL_PRIVATE (6)
true
boolean
gitea.config.service.ENABLE_NOTIFY_MAIL (6)
true
boolean
gitea.config.service.DEFAULT_ALLOW_CREATE_ORGANIZATION (4)
true
boolean
gitea.config.service.REQUIRE_SIGNIN_VIEW (4)
true
boolean
gitea.config.service.DEFAULT_ENABLE_TIMETRACKING (3)
true
boolean
gitea.config.service.AUTO_WATCH_NEW_REPOS (2)
true
boolean
gitea.config.service.ENABLE_INTERNAL_SIGNIN (2)
false
boolean
gitea.config.service.ENABLE_USER_HEATMAP (2)
true
boolean
gitea.config.service."EXPLORE.REQUIRE_SIGNIN_VIEW" (2)
false
boolean
gitea.config.service.REGISTER_EMAIL_CONFIRM (2)
true
boolean
gitea.config.service.VALID_SITE_URL_SCHEMES (2)
https
string
gitea.config.service.CAPTCHA_TYPE (1)
cfturnstile
string
gitea.config.service.DEFAULT_ORG_VISIBILITY (1)
limited
string
gitea.config.service.DEFAULT_USER_IS_RESTRICTED (1)
true
boolean
gitea.config.service.DEFAULT_USER_VISIBILITY (1)
limited
string
gitea.config.service.ENABLE_BASIC_AUTHENTICATION (1)
false
boolean
gitea.config.service.ENABLE_CAPTCHA (1)
true
boolean
gitea.config.service.ENABLE_PASSKEY_AUTHENTICATION (1)
false
boolean
gitea.config.service.explore.REQUIRE_SIGNIN_VIEW (1)
true
boolean
gitea.config.service.MAX_CREATION_LIMIT (1)
100
number
gitea.config.service.REQUIRE_CAPTCHA_FOR_LOGIN (1)
true
boolean
gitea.config.service.REQUIRE_EXTERNAL_REGISTRATION_CAPTCHA (1)
true
boolean
gitea.config.cache.ADAPTER (15)
redis
string
gitea.config.cache.HOST (12)
redis://redis.database.svc.cluster.local:6379/11
string
gitea.config.cache.ENABLED (4)
true
boolean
gitea.config.server.SSH_PORT (14)
22
number
gitea.config.server.ROOT_URL (12)
https://git.${SECRET_DOMAIN}
string
gitea.config.server.SSH_DOMAIN (12)
git.${SECRET_DOMAIN}
string
gitea.config.server.DOMAIN (10)
git.${SECRET_DOMAIN}
string
gitea.config.server.SSH_LISTEN_PORT (10)
2222
number
gitea.config.server.OFFLINE_MODE (9)
true
boolean
gitea.config.server.LANDING_PAGE (7)
explore
string
gitea.config.server.DISABLE_SSH (4)
false
boolean
gitea.config.server.LFS_START_SERVER (4)
true
boolean
gitea.config.server.ENABLE_GZIP (3)
true
boolean
gitea.config.server.START_SSH_SERVER (2)
true
boolean
gitea.config.server.LFS_HTTP_AUTH_EXPIRY (1)
20m
string
gitea.config.server.MINIMUM_KEY_SIZE_CHECK (1)
true
boolean
gitea.config.server.SSH_SERVER_HOST_KEYS (1)
/ssh/forgejo
string
gitea.config.mailer.ENABLED (13)
true
boolean
gitea.config.mailer.FROM (12)
Sky M Tmi's Forgejo <forgejo@${SECRET_DOMAIN_2}>
string
gitea.config.mailer.SMTP_PORT (10)
2525
string, number
gitea.config.mailer.PROTOCOL (9)
smtp
string
gitea.config.mailer.SMTP_ADDR (9)
smtp-relay.default
string
gitea.config.mailer.PASSWD (3)

string
gitea.config.mailer.USER (3)

string
gitea.config.queue.TYPE (13)
redis
string
gitea.config.queue.CONN_STR (11)
redis://redis.database.svc.cluster.local:6379/10
string
gitea.config.repository.DEFAULT_PRIVATE (13)
private
string, boolean
gitea.config.repository.DEFAULT_BRANCH (6)
main
string
gitea.config.repository.ENABLE_PUSH_CREATE_USER (6)
true
boolean
gitea.config.repository.DISABLE_HTTP_GIT (3)
false
boolean
gitea.config.repository.ACCESS_CONTROL_ALLOW_ORIGIN (1)
https://forgejo.fern.samoth.eu
string
gitea.config.repository.DEFAULT_PUSH_CREATE_PRIVATE (1)
false
boolean
gitea.config.repository.DEFAULT_REPO_UNITS (1)
repo.code,repo.releases,repo.issues,repo.pulls,repo.actions
string
gitea.config.repository.FORCE_PRIVATE (1)
true
boolean
gitea.config.repository.pull-request.WORK_IN_PROGRESS_PREFIXES (1)
WIP:,[WIP]:
string
gitea.config.repository.ROOT (1)
/data/git/repositories
string
gitea.config.session.PROVIDER (13)
redis
string
gitea.config.session.PROVIDER_CONFIG (10)
redis://redis.database.svc.cluster.local:6379/12
string
gitea.config.session.COOKIE_SECURE (4)
true
boolean
gitea.config.session.SAME_SITE (4)
lax
string
gitea.config.session.COOKIE_NAME (3)
forgejo_session
string
gitea.config.session.DOMAIN (3)
git.nikola.wtf
string
gitea.config.session.SESSION_LIFE_TIME (3)
86400
number
gitea.config.APP_NAME (12)
Forgejo
string
gitea.config.openid.ENABLE_OPENID_SIGNIN (9)
false
boolean
gitea.config.openid.ENABLE_OPENID_SIGNUP (7)
true
boolean
gitea.config.openid.WHITELISTED_URIS (3)
identity.18b.haus
string
gitea.config.openid.UPDATE_AVATAR (2)
true
boolean
gitea.config.openid.USERNAME (1)
preferred_username
string
gitea.config.storage.STORAGE_TYPE (9)
minio
string
gitea.config.storage.MINIO_BUCKET (8)
forgejo
string
gitea.config.storage.MINIO_ENDPOINT (8)
minio.default.svc:9000
string
gitea.config.storage.MINIO_USE_SSL (8)
true
boolean
gitea.config.storage.MINIO_LOCATION (7)
us-east-1
string
gitea.config.storage.MINIO_INSECURE_SKIP_VERIFY (4)
false
boolean
gitea.config.storage.actions_log.MINIO_BASE_PATH (1)
actions/logs/
string
gitea.config.storage.MINIO_CHECKSUM_ALGORITHM (1)
md5
string
gitea.config.storage.MINIO_RETRY_COUNT (1)
3
number
gitea.config.storage.MINIO_TIMEOUT (1)
30s
string
gitea.config.cron.ENABLED (8)
true
boolean
gitea.config.cron.git_gc_repos.ENABLED (4)
true
boolean
gitea.config.cron.git_gc_repos.ARGS (3)
--aggressive --auto
string
gitea.config.cron.git_gc_repos.SCHEDULE (3)
@every 168h
string
gitea.config.cron.git_gc_repos.TIMEOUT (3)
60s
string
gitea.config.cron.update_mirrors.SCHEDULE (4)
@every 10m
string
gitea.config.cron.update_mirrors.PULL_LIMIT (3)
50
number
gitea.config.cron.update_mirrors.PUSH_LIMIT (3)
50
number
gitea.config.cron.cleanup_actions.ENABLED (3)
true
boolean
gitea.config.cron.cleanup_actions.SCHEDULE (3)
@midnight
string
gitea.config.cron.archive_cleanup.ENABLED (1)
false
boolean
gitea.config.cron.archive_cleanup.OLDER_THAN (1)
2h
string
gitea.config.cron.archive_cleanup.SCHEDULE (1)
@hourly
string
gitea.config.cron.update_checker.ENABLED (1)
false
boolean
gitea.config.migrations.ALLOWED_DOMAINS (8)
*
string
gitea.config.migrations.ALLOW_LOCALNETWORKS (5)
true
boolean
gitea.config.migrations.SKIP_TLS_VERIFY (2)
true
boolean
gitea.config.security.PASSWORD_COMPLEXITY (7)
spec
string
gitea.config.security.REVERSE_PROXY_LIMIT (5)
1
number
gitea.config.security.MIN_PASSWORD_LENGTH (4)
12
number
gitea.config.security.REVERSE_PROXY_TRUSTED_PROXIES (4)
10.50.0.0/24
string
gitea.config.security.existingSecret (3)
forgejo-secret
string
gitea.config.security.PASSWORD_HASH_ALGO (3)
argon2
string
gitea.config.security.PASSWORD_CHECK_PWN (2)
true
boolean
gitea.config.security.INSTALL_LOCK (1)
true
boolean
gitea.config.security.UPDATE_AVATAR (1)
true
boolean
gitea.config.ui.DEFAULT_THEME (7)
gitea-dark
string
gitea.config.ui.SHOW_USER_EMAIL (5)
false
boolean
gitea.config.ui.AMBIGUOUS_UNICODE_DETECTION (3)
true
boolean
gitea.config.ui.DEFAULT_SHOW_FULL_NAME (3)
true
boolean
gitea.config.ui.FEED_MAX_COMMIT_NUM (3)
10
number
gitea.config.ui.GRAPH_MAX_COMMIT_NUM (3)
100
number
gitea.config.indexer.REPO_INDEXER_ENABLED (6)
true
boolean
gitea.config.indexer.REPO_INDEXER_REPO_TYPES (5)
sources,forks,mirrors,templates
string
gitea.config.indexer.ISSUE_INDEXER_TYPE (4)
db
string
gitea.config.webhook.ALLOWED_HOST_LIST (6)
external
string
gitea.config.webhook.DELIVER_TIMEOUT (2)
10
number
gitea.config.webhook.SKIP_TLS_VERIFY (2)
false
boolean
gitea.config.actions.ENABLED (4)
true
boolean
gitea.config.actions.ARTIFACT_RETENTION_DAYS (3)
90
number
gitea.config.actions.DEFAULT_ACTIONS_URL (3)
https://github.com
string
gitea.config.actions.LOG_COMPRESSION (3)
zstd
string
gitea.config.actions.LOG_RETENTION_DAYS (3)
365
number
gitea.config.actions.ARTIFACT_DOWNLOAD_TIMEOUT (1)
15m
string
gitea.config.actions.ARTIFACT_MAX_CONCURRENT_UPLOADS (1)
5
number
gitea.config.actions.ARTIFACT_MAX_SIZE (1)
1073741824
number
gitea.config.actions.ARTIFACT_UPLOAD_TIMEOUT (1)
60m
string
gitea.config.actions.artifacts.MINIO_BASE_PATH (1)
actions/artifacts/
string
gitea.config.actions.ENDLESS_TASK_TIMEOUT (1)
8h
string
gitea.config.actions.ZOMBIE_TASK_TIMEOUT (1)
15m
string
gitea.config.metrics.ENABLED (4)
true
boolean
gitea.config.metrics.serviceMonitor.enabled (3)
true
boolean
gitea.config.metrics.serviceMonitor.namespace (3)
monitoring
string
gitea.config.metrics.serviceMonitor.additionalLabels.release (2)
kube-prometheus-stack
string
gitea.config.time.DEFAULT_UI_LOCATION (4)
${TIMEZONE}
string
gitea.config.admin.DISABLE_REGULAR_ORG_CREATION (3)
true
boolean
gitea.config.admin.DEFAULT_EMAIL_NOTIFICATIONS (1)
disabled
string
gitea.config.admin.SEND_NOTIFICATION_EMAIL_ON_NEW_USER (1)
true
boolean
gitea.config.federation.ENABLED (3)
true
boolean
gitea.config.git.DISABLE_DIFF_HIGHLIGHT (3)
false
boolean
gitea.config.git.ENABLE_AUTO_GIT_WIRE_PROTOCOL (3)
true
boolean
gitea.config.git.MAX_GIT_DIFF_FILES (3)
100
number
gitea.config.git.MAX_GIT_DIFF_LINES (3)
1000
number
gitea.config.git.PULL_REQUEST_PUSH_MESSAGE (3)
true
boolean
gitea.config.git.VERBOSE_PUSH (3)
true
boolean
gitea.config.markdown.ENABLE_HARD_LINE_BREAK_IN_COMMENTS (3)
true
boolean
gitea.config.markdown.ENABLE_MATH (3)
true
boolean
gitea.config.oauth2_client.ENABLE_AUTO_REGISTRATION (3)
true
boolean
gitea.config.oauth2_client.UPDATE_AVATAR (2)
true
boolean
gitea.config.oauth2_client.ACCOUNT_LINKING (1)
auto
string
gitea.config.oauth2_client.OPENID_CONNECT_SCOPES (1)
openid email profile groups
string
gitea.config.oauth2_client.USERNAME (1)
preferred_username
string
gitea.config.oauth2.ACCOUNT_LINKING (3)
auto
string
gitea.config.oauth2.ENABLE_AUTO_REGISTRATION (3)
true
boolean
gitea.config.oauth2.UPDATE_AVATAR (3)
true
boolean
gitea.config.oauth2.USERNAME (3)
nickname
string
gitea.config.oauth2.OPENID_CONNECT_SCOPES (2)
openid email groups
string
gitea.config.oauth2.EANBLED (1)
false
boolean
gitea.config.qos.ENABLED (3)
true
boolean
gitea.config.api.DEFAULT_PAGING_NUM (2)
30
number
gitea.config.api.ENABLE_SWAGGER (2)
true
boolean
gitea.config.api.MAX_RESPONSE_ITEMS (2)
50
number
gitea.config.APP_SLOGAN (2)

string
gitea.config.log.LEVEL (2)
Debug
string
gitea.config.log.file.LEVEL (1)
Debug
string
gitea.config.log.LOGGER_ACCESS_MODE (1)
file
string
gitea.config.log.MODE (1)
console, file
string
gitea.config.other.SHOW_FOOTER_VERSION (2)
false
boolean
gitea.config.other.SHOW_FOOTER_TEMPLATE_LOAD_TIME (1)
false
boolean
gitea.config.packages.ENABLED (2)
false
boolean
gitea.config.packages.container.ENABLED (1)
true
boolean
gitea.config.packages.LIMIT_SIZE_CONTAINER (1)
2 GiB
string
gitea.config.packages.MINIO_BASE_PATH (1)
packages/
string
gitea.config.attachment.MINIO_BASE_PATH (1)
attachments/
string
gitea.config.attachment.MINIO_BUCKET (1)
forgejo
string
gitea.config.attachment.MINIO_ENDPOINT (1)
s3.${SECRET_DOMAIN_INTERNAL}
string
gitea.config.attachment.MINIO_LOCATION (1)
us-east-1
string
gitea.config.attachment.MINIO_USE_SSL (1)
true
boolean
gitea.config.attachment.STORAGE_TYPE (1)
minio
string
gitea.config.avatar.MINIO_BASE_PATH (1)
avatars/users/
string
gitea.config.badges.ENABLED (1)
true
boolean
gitea.config.cors.ALLOW_DOMAIN (1)
https://forgejo.fern.samoth.eu
string
gitea.config.cors.ENABLED (1)
true
boolean
gitea.config.i18n.LANGS (1)
en-US
string
gitea.config.i18n.NAMES (1)
English
string
gitea.config.lfs.MINIO_BASE_PATH (1)
lfs/
string
gitea.config.lfs.PATH (1)
/data/git/lfs
string
gitea.config.repo-archive.MINIO_BASE_PATH (1)
archives/
string
gitea.config.repo-avatar.MINIO_BASE_PATH (1)
avatars/repositories/
string
gitea.config.ssh.minimum_key_sizes.DSA (1)
-1
number
gitea.config.ssh.minimum_key_sizes.ECDSA (1)
-1
number
gitea.config.ssh.minimum_key_sizes.RSA (1)
-1
number
gitea.admin.existingSecret (12)
forgejo-admin-secret
string
gitea.admin.passwordMode (6)
initialOnlyNoReset
string
gitea.admin.email (4)
forgejo@${CLUSTER_SHORT_DOMAIN}
string
gitea.admin.username (4)
kryptonian
string
gitea.admin.password (2)
notUsed
string
gitea.metrics.enabled (8)
true
boolean, string
gitea.metrics.serviceMonitor.enabled (7)
true
boolean, string
gitea.oauth[].autoDiscoverUrl (7)
https://auth.${SECRET_DOMAIN}/.well-known/openid-configuration
string
gitea.oauth[].name (7)
Authentik
string
gitea.oauth[].provider (7)
openidConnect
string
gitea.oauth[].scopes (6)
email profile groups
string
gitea.oauth[].existingSecret (4)
forgejo-oauth-secret
string
gitea.oauth[].iconUrl (4)
https://raw.githubusercontent.com/homarr-labs/dashboard-icons/main/png/authentik.png
string
gitea.oauth[].adminGroup (3)
admins
string
gitea.oauth[].groupClaimName (3)
groups
string
gitea.oauth[].key (1)
${client_id}
string
gitea.oauth[].secret (1)
${client_secret}
string
gitea.additionalConfigFromEnvs[].name (4)
FORGEJO__DATABASE__PASSWD
string
gitea.additionalConfigFromEnvs[].valueFrom.secretKeyRef.key (4)
password
string
gitea.additionalConfigFromEnvs[].valueFrom.secretKeyRef.name (4)
postgres-infra-pguser-forgejo
string
gitea.additionalConfigFromEnvs[].value (1)
pooler-forgejo-rw
string
gitea.podAnnotations."reloader.stakater.com/search" (2)
true
string
gitea.livenessProbe.failureThreshold (1)
10
number
gitea.livenessProbe.httpGet.path (1)
/api/healthz
string
gitea.livenessProbe.httpGet.port (1)
http
string
gitea.livenessProbe.initialDelaySeconds (1)
30
number
gitea.livenessProbe.periodSeconds (1)
30
number
gitea.livenessProbe.successThreshold (1)
1
number
gitea.ssh.logLevel (1)
INFO
string
persistence.claimName (17)
forgejo
string
persistence.enabled (16)
true
boolean
persistence.create (15)
false
boolean
persistence.mount (4)
true
boolean
persistence.data.globalMounts[].path (3)
/var/lib/gitea
string
persistence.data.existingClaim (2)
forgejo
string
persistence.data.enabled (1)
true
boolean
persistence.data.path (1)
/mnt/Data/Forgejo
string
persistence.data.server (1)
nas.main.internal
string
persistence.data.type (1)
nfs
string
persistence.config.advancedMounts.main.01-set-config[].path (2)
/config
string
persistence.config.advancedMounts.main.01-set-config[].readOnly (2)
true
boolean
persistence.config.advancedMounts.forgejo.app[].path (1)
/etc/gitea
/data/gitea
/var/lib/gitea/git
string
persistence.config.advancedMounts.forgejo.app[].subPath (1)
gitea-config
gitea-data
gitea-lfs
string
persistence.config.name (2)
forgejo-configmap
string
persistence.config.type (2)
configMap
string
persistence.config.existingClaim (1)
{{ .Release.Name }}
string
persistence.root-ca.advancedMounts.main.app[].path (2)
/etc/ssl/certs/homelab.crt
string
persistence.root-ca.advancedMounts.main.app[].subPath (2)
ec.crt
string
persistence.root-ca.name (2)
homelab-root-ca.crt
string
persistence.root-ca.type (2)
secret
string
persistence.size (2)
${VOLSYNC_CAPACITY}
string
persistence.tmp.globalMounts[].path (2)
/tmp
string
persistence.tmp.globalMounts[].subPath (2)
tmp
string
persistence.tmp.type (2)
emptyDir
string
postgresql.enabled (14)
false
boolean
strategy.type (13)
Recreate
string
ingress.enabled (12)
false
boolean
ingress.hosts[].host (4)
git.${SECRET_DOMAIN}
string
ingress.hosts[].paths[].path (4)
/
string
ingress.hosts[].paths[].pathType (4)
Prefix
string
ingress.hosts[].paths[].port (1)
http
string
ingress.tls[].hosts[] (3)
- git.${SECRET_DOMAIN}
string
ingress.tls[].secretName (2)
forgejo-tls
string
ingress.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
ingress.annotations.external-dns/is-public (1)
true
string
ingress.annotations."gethomepage.dev/description" (1)
Self-hosted lightweight software forge.
string
ingress.annotations."gethomepage.dev/enabled" (1)
true
string
ingress.annotations."gethomepage.dev/group" (1)
Collaboration
string
ingress.annotations."gethomepage.dev/icon" (1)
forgejo
string
ingress.annotations."gethomepage.dev/name" (1)
Forgejo
string
ingress.annotations."hajimari.io/enable" (1)
true
string
ingress.annotations."hajimari.io/group" (1)
tools
string
ingress.annotations."hajimari.io/icon" (1)
simple-icons:forgejo
string
ingress.annotations."hajimari.io/info" (1)
Home Source Repository
string
ingress.annotations."haproxy.org/allow-list" (1)
${HAPROXY_WHITELIST}
string
ingress.annotations."haproxy.org/response-set-header" (1)
Strict-Transport-Security "max-age=31536000" X-Frame-Options "DENY" X-Content-Type-Options "nosniff" Referrer-Policy "strict-origin-when-cross-origin"
string
ingress.annotations."haproxy.org/ssl-redirect-port" (1)
443
string
ingress.annotations."nginx.ingress.kubernetes.io/enable-global-auth" (1)
false
string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-body-size" (1)
8000m
string
ingress.className (1)
external
string
postgresql-ha.enabled (12)
false
boolean
service.ssh.port (11)
22
number
service.ssh.type (11)
LoadBalancer
string
service.ssh.annotations."io.cilium/lb-ipam-ips" (5)
${FORGEJO_ADDRESS}
string
service.ssh.annotations."external-dns.alpha.kubernetes.io/hostname" (4)
git-ssh.18b.haus
string
service.ssh.annotations."lbipam.cilium.io/ips" (2)
192.168.222.125
string
service.ssh.annotations."metallb.io/loadBalancerIPs" (1)
${CLUSTER_EXTERNAL_SUBNET_PREFIX}.${CLUSTER_LB_FORGEJO}
string
service.ssh.externalTrafficPolicy (3)
Local
string
service.ssh.loadBalancerIP (3)
10.0.1.44
string
service.ssh.hostPort (2)
222
number
service.ssh.ipFamilyPolicy (2)
PreferDualStack
string
service.ssh.ipFamilies[] (1)
- IPv4
- IPv6
string
service.ssh.targetPort (1)
2222
number
service.http.port (6)
3000
number
service.http.extraPorts[].name (3)
anubis
string
service.http.extraPorts[].port (3)
8080
number
service.http.extraPorts[].targetPort (3)
anubis
string
service.http.type (1)
ClusterIP
string
service.app.ports.http.port (3)
80
number
service.app.ports.ssh.port (2)
22
number
service.annotations."prometheus.io/probe" (2)
true
string
service.annotations."prometheus.io/protocol" (2)
tcp
string
valkey-cluster.enabled (10)
false
boolean
resources.limits.memory (9)
2Gi
string
resources.limits.cpu (3)
2000m
string
resources.requests.memory (9)
1Gi
string
resources.requests.cpu (7)
10m
string
image.rootless (8)
true
boolean
image.repository (6)
forgejo/forgejo
string
image.tag (6)
14.0.2
string
image.registry (5)
code.forgejo.org
string
image.digest (1)
sha256:d07a623ff4da1a78baab6f3ba0b3273268efd305c73cbc597e1ebe735b77e6b1
string
redis-cluster.enabled (7)
false
boolean
podSecurityContext.fsGroup (6)
1000
number
podSecurityContext.runAsGroup (3)
1000
number
podSecurityContext.runAsUser (3)
1000
number
podSecurityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
podSecurityContext.runAsNonRoot (1)
true
boolean
podSecurityContext.seccompProfile.type (1)
RuntimeDefault
string
deployment.annotations."secret.reloader.stakater.com/reload" (5)
forgejo-secret
string
deployment.annotations."reloader.stakater.com/auto" (1)
true
string
deployment.terminationGracePeriodSeconds (1)
600
number
extraVolumes[].name (5)
anubis-policies
string
extraVolumes[].configMap.name (3)
anubis-configmap
string
extraVolumes[].configMap.defaultMode (1)
555
number
extraVolumes[].secret.secretName (2)
forgejo-ssh-keys
string
extraVolumes[].secret.items[].key (1)
gitconfig
string
extraVolumes[].secret.items[].path (1)
.gitconfig
string
httpRoute.enabled (5)
true
boolean
httpRoute.hostnames[] (5)
- git.${SECRET_DOMAIN_2}
string
httpRoute.parentRefs[].name (5)
envoy
string
httpRoute.parentRefs[].namespace (5)
networking
string
httpRoute.parentRefs[].group (2)
gateway.networking.k8s.io
string
httpRoute.parentRefs[].kind (2)
Gateway
string
httpRoute.parentRefs[].sectionName (1)
https
string
httpRoute.annotations."external-dns.alpha.kubernetes.io/cloudflare-proxied" (2)
false
string
httpRoute.annotations."external-dns.alpha.kubernetes.io/target" (2)
ingress.${SECRET_DOMAIN_2}
string
httpRoute.rules[].backendRefs[].name (1)
forgejo-http
string
httpRoute.rules[].backendRefs[].namespace (1)
development
string
httpRoute.rules[].backendRefs[].port (1)
anubis
string
replicaCount (5)
1
number
containerSecurityContext.allowPrivilegeEscalation (4)
false
boolean
containerSecurityContext.capabilities.add[] (4)
- SYS_CHROOT
string
containerSecurityContext.capabilities.drop[] (1)
- ALL
string
containerSecurityContext.readOnlyRootFilesystem (4)
true
boolean
containerSecurityContext.runAsGroup (3)
1000
number
containerSecurityContext.runAsNonRoot (3)
true
boolean
containerSecurityContext.runAsUser (3)
1000
number
checkDeprecation (3)
true
boolean
defaultPodOptions.securityContext.fsGroup (3)
1000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (3)
OnRootMismatch
string
defaultPodOptions.securityContext.runAsGroup (3)
1000
number
defaultPodOptions.securityContext.runAsNonRoot (3)
true
boolean
defaultPodOptions.securityContext.runAsUser (3)
1000
number
defaultPodOptions.securityContext.seccompProfile.type (2)
RuntimeDefault
string
defaultPodOptions.automountServiceAccountToken (2)
false
boolean
defaultPodOptions.dnsConfig.options[].name (2)
ndots
string
defaultPodOptions.dnsConfig.options[].value (2)
1
string
defaultPodOptions.enableServiceLinks (2)
false
boolean
defaultPodOptions.labels."egress.cilium.io/auth" (2)
true
string
defaultPodOptions.labels."egress.cilium.io/smtp-relay" (2)
true
string
extraContainers[].env[].name (3)
BIND
DIFFICULTY
SERVE_ROBOTS_TXT
ED25519_PRIVATE_KEY_HEX
TARGET
string
extraContainers[].env[].value (3)
:8080
10
true
http://localhost:3000
string
extraContainers[].env[].valueFrom.secretKeyRef.key (2)
ED25519_PRIVATE_KEY
string
extraContainers[].env[].valueFrom.secretKeyRef.name (2)
anubis-secret
string
extraContainers[].image (3)
ghcr.io/techarohq/anubis:v1.25.0
string
extraContainers[].imagePullPolicy (3)
Always
string
extraContainers[].name (3)
anubis
string
extraContainers[].ports[].containerPort (3)
8080
number
extraContainers[].ports[].name (3)
anubis
string
extraContainers[].securityContext.allowPrivilegeEscalation (3)
false
boolean
extraContainers[].securityContext.capabilities.drop[] (3)
- ALL
string
extraContainers[].securityContext.runAsGroup (3)
1000
number
extraContainers[].securityContext.runAsNonRoot (3)
true
boolean
extraContainers[].securityContext.runAsUser (3)
1000
number
extraContainers[].securityContext.seccompProfile.type (3)
RuntimeDefault
string
extraContainers[].volumeMounts[].mountPath (3)
/etc/anubis/policies
string
extraContainers[].volumeMounts[].name (3)
anubis-policies
string
extraContainers[].volumeMounts[].readOnly (1)
true
boolean
extraContainers[].volumeMounts[].subPath (1)
anubisBotPolicy.json
string
extraContainers[].args[] (2)
- -policy-fname
- /etc/anubis/policies/botPolicies.yaml
string
memcached.enabled (3)
false
boolean
route.app.annotations."gatus.home-operations.com/endpoint" (3)
name: forgejo
string
route.app.hostnames[] (3)
- git.${ROOT_DOMAIN}
string
route.app.parentRefs[].name (3)
envoy-internal
string
route.app.parentRefs[].namespace (3)
network
string
route.app.rules[].backendRefs[].name (2)
forgejo
string
route.app.rules[].backendRefs[].port (2)
80
number
route.app.rules[].filters[].requestRedirect.path.replaceFullPath (2)
/user/oauth2/Pocket ID
string
route.app.rules[].filters[].requestRedirect.path.type (2)
ReplaceFullPath
string
route.app.rules[].filters[].requestRedirect.statusCode (2)
301
number
route.app.rules[].filters[].responseHeaderModifier.set[].name (2)
Content-Security-Policy
string
route.app.rules[].filters[].responseHeaderModifier.set[].value (2)
default-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';
string
route.app.rules[].filters[].type (2)
ResponseHeaderModifier
RequestRedirect
string
route.app.rules[].matches[].path.type (2)
PathPrefix
string
route.app.rules[].matches[].path.value (2)
/user/login
string
route.ssh.kind (2)
TCPRoute
string
route.ssh.parentRefs[].name (2)
envoy-internal
string
route.ssh.parentRefs[].namespace (2)
network
string
route.ssh.parentRefs[].sectionName (2)
ssh
string
route.ssh.rules[].backendRefs[].name (2)
forgejo
string
route.ssh.rules[].backendRefs[].port (2)
22
number
test.enabled (3)
true
boolean
test.image.name (3)
busybox
string
test.image.tag (3)
latest
string
controllers.main.containers.app.env.FORGEJO__mailer__FROM (2)
${CLUSTER_NAME}@${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__mailer__SMTP_ADDR (2)
smtp-relay.network.svc.cluster.local
string
controllers.main.containers.app.env.FORGEJO__mailer__SMTP_PORT (2)
25
string
controllers.main.containers.app.env.FORGEJO__openid__WHITELISTED_URIS (2)
id.${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__server__DOMAIN (2)
git.${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__server__HTTP_PORT (2)
80
number
controllers.main.containers.app.env.FORGEJO__server__ROOT_URL (2)
https://git.${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__server__SSH_DOMAIN (2)
git.${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__server__SSH_PORT (2)
22
number
controllers.main.containers.app.env.FORGEJO__time__DEFAULT_UI_LOCATION (2)
Europe/Warsaw
string
controllers.main.containers.app.env.TZ (2)
Europe/Warsaw
string
controllers.main.containers.app.envFrom[].secretRef.name (2)
forgejo-secret
string
controllers.main.containers.app.image.repository (2)
codeberg.org/forgejo/forgejo
string
controllers.main.containers.app.image.tag (2)
14.0.2-rootless@sha256:5552c9e25f353760420b8ac7a7f0f0a788ff571bbfd8e2c1e93503d3e2e1b87a
string
controllers.main.containers.app.probes.liveness.custom (2)
true
boolean
controllers.main.containers.app.probes.liveness.enabled (2)
true
boolean
controllers.main.containers.app.probes.liveness.spec.failureThreshold (2)
3
number
controllers.main.containers.app.probes.liveness.spec.httpGet.path (2)
/api/healthz
string
controllers.main.containers.app.probes.liveness.spec.httpGet.port (2)
80
number
controllers.main.containers.app.probes.liveness.spec.initialDelaySeconds (2)
0
number
controllers.main.containers.app.probes.liveness.spec.periodSeconds (2)
10
number
controllers.main.containers.app.probes.liveness.spec.timeoutSeconds (2)
1
number
controllers.main.containers.app.probes.readiness.custom (2)
true
boolean
controllers.main.containers.app.probes.readiness.enabled (2)
true
boolean
controllers.main.containers.app.probes.readiness.spec.failureThreshold (2)
3
number
controllers.main.containers.app.probes.readiness.spec.httpGet.path (2)
/api/healthz
string
controllers.main.containers.app.probes.readiness.spec.httpGet.port (2)
80
number
controllers.main.containers.app.probes.readiness.spec.initialDelaySeconds (2)
0
number
controllers.main.containers.app.probes.readiness.spec.periodSeconds (2)
10
number
controllers.main.containers.app.probes.readiness.spec.timeoutSeconds (2)
1
number
controllers.main.containers.app.resources.limits.memory (2)
2048Mi
string
controllers.main.containers.app.resources.requests.cpu (2)
10m
string
controllers.main.containers.app.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.main.containers.app.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.main.containers.app.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.main.initContainers.01-set-config.command[] (2)
- /bin/sh
- -c
- mkdir -p /var/lib/gitea/custom/conf cp /config/app.ini /var/lib/gitea/custom/conf/app.ini
string
controllers.main.initContainers.01-set-config.image.repository (2)
ghcr.io/home-operations/busybox
string
controllers.main.initContainers.01-set-config.image.tag (2)
1.37.0@sha256:026ed7273270ec08f6902b4ae8334c23b473e5394bec3bbbdbfe580c710d50bc
string
controllers.main.initContainers.01-set-config.resources.requests.cpu (2)
5m
string
controllers.main.initContainers.01-set-config.resources.requests.memory (2)
10M
string
controllers.main.initContainers.01-set-config.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.main.initContainers.01-set-config.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.main.initContainers.01-set-config.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.forgejo.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.forgejo.containers.app.env.TZ (1)
${TIMEZONE}
string
controllers.forgejo.containers.app.env.USER_GID (1)
1000
number
controllers.forgejo.containers.app.env.USER_UID (1)
1000
number
controllers.forgejo.containers.app.envFrom[].secretRef.name (1)
forgejo-secret
string
controllers.forgejo.containers.app.image.pullPolicy (1)
IfNotPresent
string
controllers.forgejo.containers.app.image.repository (1)
codeberg.org/forgejo/forgejo
string
controllers.forgejo.containers.app.image.tag (1)
14.0.2-rootless@sha256:5552c9e25f353760420b8ac7a7f0f0a788ff571bbfd8e2c1e93503d3e2e1b87a
string
controllers.forgejo.initContainers.init-db.envFrom[].secretRef.name (1)
forgejo-secret
string
controllers.forgejo.initContainers.init-db.image.repository (1)
ghcr.io/home-operations/postgres-init
string
controllers.forgejo.initContainers.init-db.image.tag (1)
18.2.0@sha256:ae89578925b480f5972f237dda2f7a37efe36aff500d3e7bd1d3a6a3181e4191
string
extraContainerVolumeMounts[].mountPath (2)
/ssh
string
extraContainerVolumeMounts[].name (2)
ssh-key
string
extraContainerVolumeMounts[].readOnly (2)
true
boolean
extraContainerVolumeMounts[].defaultMode (1)
400
number
extraContainerVolumeMounts[].subPath (1)
.gitconfig
string
nameOverride (2)
forgejo
string
global.hostAliases[].hostnames[] (1)
- ${GITLAB_MIRROR_HOST:=gitlab-proxy}
string
global.hostAliases[].ip (1)
192.168.69.127
string
global.priorityClassName (1)
cluster-low
string
livenessProbe.enabled (1)
true
boolean
livenessProbe.failureThreshold (1)
5
number
livenessProbe.initialDelaySeconds (1)
300
number
livenessProbe.periodSeconds (1)
30
number
livenessProbe.successThreshold (1)
1
number
livenessProbe.timeoutSeconds (1)
10
number
readinessProbe.enabled (1)
true
boolean
readinessProbe.failureThreshold (1)
5
number
readinessProbe.initialDelaySeconds (1)
60
number
readinessProbe.periodSeconds (1)
20
number
readinessProbe.successThreshold (1)
1
number
readinessProbe.timeoutSeconds (1)
10
number
serviceAccount.create (1)
true
boolean
startupProbe.enabled (1)
true
boolean
startupProbe.failureThreshold (1)
30
number
startupProbe.initialDelaySeconds (1)
60
number
startupProbe.periodSeconds (1)
10
number
startupProbe.successThreshold (1)
1
number
startupProbe.timeoutSeconds (1)
5
number
valkey.enabled (1)
false
boolean