forgejo helm

No introduction found. Create it?

Install

Install with:

helm repo add forgejo oci://code.forgejo.org/forgejo-helm/forgejo
helm install forgejo forgejo/forgejo -f values.yaml

Examples

See examples from other people.

Top Repositories (2 out of 19)

NameRepoStarsVersionTimestamp
forgejoangelnu/k8s-gitops18116.2.02 days ago
forgejodrag0n141/home-ops5216.2.018 days ago

Resources

100Mi128Mi237Mi256Mi512Mi2048Mi4096Mi
237Mi512Mi1024Mi2048Mi4096Mi24576Mi
10m15m50m100m500m

Values

See the most popular values for this chart:

KeyTypes
gitea.config.database.DB_TYPE (15)
postgres
string
gitea.config.database.HOST (5)
pg-cluster-forgejo-primary.collaboration.svc:5432
string
gitea.config.database.SSL_MODE (5)
disable
string
gitea.config.database.NAME (3)
forgejo
string
gitea.config.database.LOG_SQL (2)
false
boolean
gitea.config.database.SLOW_QUERY_THRESHOLD (2)
5s
string
gitea.config.database.USER (2)
forgejo
string
gitea.config.database.MAX_OPEN_CONNS (1)
10
number
gitea.config.database.PASSWD (1)
${POSTGRES_FORGEJO_PASSWORD}
string
gitea.config.database.PATH (1)
/data/gitea.db
string
gitea.config.database.SCHEMA (1)
public
string
gitea.config.database.SQLITE_JOURNAL_MODE (1)
wal
string
gitea.config.service.DISABLE_REGISTRATION (14)
false
boolean
gitea.config.service.ALLOW_ONLY_EXTERNAL_REGISTRATION (9)
true
boolean
gitea.config.service.SHOW_REGISTRATION_BUTTON (8)
false
boolean
gitea.config.service.DEFAULT_KEEP_EMAIL_PRIVATE (6)
true
boolean
gitea.config.service.ENABLE_NOTIFY_MAIL (6)
true
boolean
gitea.config.service.DEFAULT_ALLOW_CREATE_ORGANIZATION (4)
true
boolean
gitea.config.service.REQUIRE_SIGNIN_VIEW (4)
true
boolean
gitea.config.service.DEFAULT_ENABLE_TIMETRACKING (3)
true
boolean
gitea.config.service.AUTO_WATCH_NEW_REPOS (2)
true
boolean
gitea.config.service.ENABLE_USER_HEATMAP (2)
true
boolean
gitea.config.service."EXPLORE.REQUIRE_SIGNIN_VIEW" (2)
false
boolean
gitea.config.service.REGISTER_EMAIL_CONFIRM (2)
true
boolean
gitea.config.service.VALID_SITE_URL_SCHEMES (2)
https
string
gitea.config.service.CAPTCHA_TYPE (1)
cfturnstile
string
gitea.config.service.DEFAULT_ORG_VISIBILITY (1)
limited
string
gitea.config.service.DEFAULT_USER_IS_RESTRICTED (1)
true
boolean
gitea.config.service.DEFAULT_USER_VISIBILITY (1)
limited
string
gitea.config.service.ENABLE_BASIC_AUTHENTICATION (1)
false
boolean
gitea.config.service.ENABLE_CAPTCHA (1)
true
boolean
gitea.config.service.ENABLE_PASSKEY_AUTHENTICATION (1)
false
boolean
gitea.config.service.explore.REQUIRE_SIGNIN_VIEW (1)
true
boolean
gitea.config.service.MAX_CREATION_LIMIT (1)
100
number
gitea.config.service.REQUIRE_CAPTCHA_FOR_LOGIN (1)
true
boolean
gitea.config.service.REQUIRE_EXTERNAL_REGISTRATION_CAPTCHA (1)
true
boolean
gitea.config.cache.ADAPTER (13)
redis
string
gitea.config.cache.HOST (10)
redis://dragonfly.database.svc:6379/0?pool_size=100&idle_timeout=180s
string
gitea.config.cache.ENABLED (4)
true
boolean
gitea.config.server.ROOT_URL (12)
https://git.${SECRET_DOMAIN}
string
gitea.config.server.SSH_DOMAIN (12)
git.${SECRET_DOMAIN}
string
gitea.config.server.SSH_PORT (12)
22
number
gitea.config.server.DOMAIN (10)
git.${SECRET_DOMAIN}
string
gitea.config.server.SSH_LISTEN_PORT (10)
2222
number
gitea.config.server.OFFLINE_MODE (9)
true
boolean
gitea.config.server.LANDING_PAGE (7)
explore
string
gitea.config.server.DISABLE_SSH (4)
false
boolean
gitea.config.server.LFS_START_SERVER (4)
true
boolean
gitea.config.server.ENABLE_GZIP (3)
true
boolean
gitea.config.server.START_SSH_SERVER (2)
true
boolean
gitea.config.server.LFS_HTTP_AUTH_EXPIRY (1)
20m
string
gitea.config.server.MINIMUM_KEY_SIZE_CHECK (1)
true
boolean
gitea.config.server.SSH_SERVER_HOST_KEYS (1)
/ssh/forgejo
string
gitea.config.mailer.ENABLED (11)
true
boolean
gitea.config.mailer.FROM (10)
Forgejo <cluster@${SECRET_DOMAIN}>
string
gitea.config.mailer.SMTP_PORT (8)
25
string, number
gitea.config.mailer.PROTOCOL (7)
smtp
string
gitea.config.mailer.SMTP_ADDR (7)
smtp-relay.default.svc.cluster.local
string
gitea.config.mailer.PASSWD (3)

string
gitea.config.mailer.USER (3)

string
gitea.config.queue.TYPE (11)
redis
string
gitea.config.queue.CONN_STR (9)
redis://dragonfly.database.svc:6379/0?pool_size=100&idle_timeout=180s
string
gitea.config.repository.DEFAULT_PRIVATE (11)
private
string, boolean
gitea.config.repository.DEFAULT_BRANCH (4)
main
string
gitea.config.repository.ENABLE_PUSH_CREATE_USER (4)
true
boolean
gitea.config.repository.DISABLE_HTTP_GIT (3)
false
boolean
gitea.config.repository.ACCESS_CONTROL_ALLOW_ORIGIN (1)
https://forgejo.fern.samoth.eu
string
gitea.config.repository.DEFAULT_PUSH_CREATE_PRIVATE (1)
false
boolean
gitea.config.repository.DEFAULT_REPO_UNITS (1)
repo.code,repo.releases,repo.issues,repo.pulls,repo.actions
string
gitea.config.repository.FORCE_PRIVATE (1)
true
boolean
gitea.config.repository.pull-request.WORK_IN_PROGRESS_PREFIXES (1)
WIP:,[WIP]:
string
gitea.config.repository.ROOT (1)
/data/git/repositories
string
gitea.config.session.PROVIDER (11)
redis
string
gitea.config.session.PROVIDER_CONFIG (8)
redis://dragonfly.database.svc:6379/0?pool_size=100&idle_timeout=180s
string
gitea.config.session.COOKIE_SECURE (4)
true
boolean
gitea.config.session.SAME_SITE (4)
lax
string
gitea.config.session.COOKIE_NAME (3)
forgejo_session
string
gitea.config.session.DOMAIN (3)
git.nikola.wtf
string
gitea.config.session.SESSION_LIFE_TIME (3)
86400
number
gitea.config.APP_NAME (10)
Forgejo
string
gitea.config.openid.ENABLE_OPENID_SIGNIN (9)
false
boolean
gitea.config.openid.ENABLE_OPENID_SIGNUP (7)
true
boolean
gitea.config.openid.WHITELISTED_URIS (3)
identity.18b.haus
string
gitea.config.openid.UPDATE_AVATAR (2)
true
boolean
gitea.config.openid.USERNAME (1)
preferred_username
string
gitea.config.storage.STORAGE_TYPE (9)
minio
string
gitea.config.storage.MINIO_BUCKET (8)
forgejo
string
gitea.config.storage.MINIO_ENDPOINT (8)
minio.default.svc:9000
string
gitea.config.storage.MINIO_USE_SSL (8)
true
boolean
gitea.config.storage.MINIO_LOCATION (7)
us-east-1
string
gitea.config.storage.MINIO_INSECURE_SKIP_VERIFY (4)
false
boolean
gitea.config.storage.actions_log.MINIO_BASE_PATH (1)
actions/logs/
string
gitea.config.storage.MINIO_CHECKSUM_ALGORITHM (1)
md5
string
gitea.config.storage.MINIO_RETRY_COUNT (1)
3
number
gitea.config.storage.MINIO_TIMEOUT (1)
30s
string
gitea.config.migrations.ALLOWED_DOMAINS (8)
*
string
gitea.config.migrations.ALLOW_LOCALNETWORKS (5)
true
boolean
gitea.config.migrations.SKIP_TLS_VERIFY (2)
true
boolean
gitea.config.ui.DEFAULT_THEME (7)
gitea-dark
string
gitea.config.ui.SHOW_USER_EMAIL (5)
false
boolean
gitea.config.ui.AMBIGUOUS_UNICODE_DETECTION (3)
true
boolean
gitea.config.ui.DEFAULT_SHOW_FULL_NAME (3)
true
boolean
gitea.config.ui.FEED_MAX_COMMIT_NUM (3)
10
number
gitea.config.ui.GRAPH_MAX_COMMIT_NUM (3)
100
number
gitea.config.cron.ENABLED (6)
true
boolean
gitea.config.cron.git_gc_repos.ENABLED (4)
true
boolean
gitea.config.cron.git_gc_repos.ARGS (3)
--aggressive --auto
string
gitea.config.cron.git_gc_repos.SCHEDULE (3)
@every 168h
string
gitea.config.cron.git_gc_repos.TIMEOUT (3)
60s
string
gitea.config.cron.update_mirrors.SCHEDULE (4)
@every 10m
string
gitea.config.cron.update_mirrors.PULL_LIMIT (3)
50
number
gitea.config.cron.update_mirrors.PUSH_LIMIT (3)
50
number
gitea.config.cron.cleanup_actions.ENABLED (3)
true
boolean
gitea.config.cron.cleanup_actions.SCHEDULE (3)
@midnight
string
gitea.config.cron.archive_cleanup.ENABLED (1)
false
boolean
gitea.config.cron.archive_cleanup.OLDER_THAN (1)
2h
string
gitea.config.cron.archive_cleanup.SCHEDULE (1)
@hourly
string
gitea.config.cron.update_checker.ENABLED (1)
false
boolean
gitea.config.webhook.ALLOWED_HOST_LIST (6)
external
string
gitea.config.webhook.DELIVER_TIMEOUT (2)
10
number
gitea.config.webhook.SKIP_TLS_VERIFY (2)
false
boolean
gitea.config.security.PASSWORD_COMPLEXITY (5)
spec
string
gitea.config.security.existingSecret (3)
forgejo-secret
string
gitea.config.security.PASSWORD_HASH_ALGO (3)
argon2
string
gitea.config.security.REVERSE_PROXY_LIMIT (3)
1
number
gitea.config.security.MIN_PASSWORD_LENGTH (2)
12
number
gitea.config.security.PASSWORD_CHECK_PWN (2)
true
boolean
gitea.config.security.REVERSE_PROXY_TRUSTED_PROXIES (2)
127.0.0.0/8,::1/128,10.42.0.0/16,fd01::/48
string
gitea.config.security.INSTALL_LOCK (1)
true
boolean
gitea.config.security.UPDATE_AVATAR (1)
true
boolean
gitea.config.actions.ENABLED (4)
true
boolean
gitea.config.actions.ARTIFACT_RETENTION_DAYS (3)
90
number
gitea.config.actions.DEFAULT_ACTIONS_URL (3)
https://github.com
string
gitea.config.actions.LOG_COMPRESSION (3)
zstd
string
gitea.config.actions.LOG_RETENTION_DAYS (3)
365
number
gitea.config.actions.ARTIFACT_DOWNLOAD_TIMEOUT (1)
15m
string
gitea.config.actions.ARTIFACT_MAX_CONCURRENT_UPLOADS (1)
5
number
gitea.config.actions.ARTIFACT_MAX_SIZE (1)
1073741824
number
gitea.config.actions.ARTIFACT_UPLOAD_TIMEOUT (1)
60m
string
gitea.config.actions.artifacts.MINIO_BASE_PATH (1)
actions/artifacts/
string
gitea.config.actions.ENDLESS_TASK_TIMEOUT (1)
8h
string
gitea.config.actions.ZOMBIE_TASK_TIMEOUT (1)
15m
string
gitea.config.indexer.ISSUE_INDEXER_TYPE (4)
db
string
gitea.config.indexer.REPO_INDEXER_ENABLED (4)
true
boolean
gitea.config.indexer.REPO_INDEXER_REPO_TYPES (3)
sources,forks,mirrors,templates
string
gitea.config.metrics.ENABLED (4)
true
boolean
gitea.config.metrics.serviceMonitor.enabled (3)
true
boolean
gitea.config.metrics.serviceMonitor.namespace (3)
monitoring
string
gitea.config.metrics.serviceMonitor.additionalLabels.release (2)
kube-prometheus-stack
string
gitea.config.time.DEFAULT_UI_LOCATION (4)
${TIMEZONE}
string
gitea.config.federation.ENABLED (3)
true
boolean
gitea.config.git.DISABLE_DIFF_HIGHLIGHT (3)
false
boolean
gitea.config.git.ENABLE_AUTO_GIT_WIRE_PROTOCOL (3)
true
boolean
gitea.config.git.MAX_GIT_DIFF_FILES (3)
100
number
gitea.config.git.MAX_GIT_DIFF_LINES (3)
1000
number
gitea.config.git.PULL_REQUEST_PUSH_MESSAGE (3)
true
boolean
gitea.config.git.VERBOSE_PUSH (3)
true
boolean
gitea.config.markdown.ENABLE_HARD_LINE_BREAK_IN_COMMENTS (3)
true
boolean
gitea.config.markdown.ENABLE_MATH (3)
true
boolean
gitea.config.oauth2_client.ENABLE_AUTO_REGISTRATION (3)
true
boolean
gitea.config.oauth2_client.UPDATE_AVATAR (2)
true
boolean
gitea.config.oauth2_client.ACCOUNT_LINKING (1)
auto
string
gitea.config.oauth2_client.OPENID_CONNECT_SCOPES (1)
openid email profile groups
string
gitea.config.oauth2_client.USERNAME (1)
preferred_username
string
gitea.config.oauth2.ACCOUNT_LINKING (3)
auto
string
gitea.config.oauth2.ENABLE_AUTO_REGISTRATION (3)
true
boolean
gitea.config.oauth2.UPDATE_AVATAR (3)
true
boolean
gitea.config.oauth2.USERNAME (3)
nickname
string
gitea.config.oauth2.OPENID_CONNECT_SCOPES (2)
openid email groups
string
gitea.config.oauth2.EANBLED (1)
false
boolean
gitea.config.qos.ENABLED (3)
true
boolean
gitea.config.api.DEFAULT_PAGING_NUM (2)
30
number
gitea.config.api.ENABLE_SWAGGER (2)
true
boolean
gitea.config.api.MAX_RESPONSE_ITEMS (2)
50
number
gitea.config.APP_SLOGAN (2)

string
gitea.config.log.LEVEL (2)
Debug
string
gitea.config.log.file.LEVEL (1)
Debug
string
gitea.config.log.LOGGER_ACCESS_MODE (1)
file
string
gitea.config.log.MODE (1)
console, file
string
gitea.config.packages.ENABLED (2)
false
boolean
gitea.config.packages.container.ENABLED (1)
true
boolean
gitea.config.packages.LIMIT_SIZE_CONTAINER (1)
2 GiB
string
gitea.config.packages.MINIO_BASE_PATH (1)
packages/
string
gitea.config.admin.DEFAULT_EMAIL_NOTIFICATIONS (1)
disabled
string
gitea.config.admin.DISABLE_REGULAR_ORG_CREATION (1)
true
boolean
gitea.config.admin.SEND_NOTIFICATION_EMAIL_ON_NEW_USER (1)
true
boolean
gitea.config.attachment.MINIO_BASE_PATH (1)
attachments/
string
gitea.config.attachment.MINIO_BUCKET (1)
forgejo
string
gitea.config.attachment.MINIO_ENDPOINT (1)
s3.${SECRET_DOMAIN_INTERNAL}
string
gitea.config.attachment.MINIO_LOCATION (1)
us-east-1
string
gitea.config.attachment.MINIO_USE_SSL (1)
true
boolean
gitea.config.attachment.STORAGE_TYPE (1)
minio
string
gitea.config.avatar.MINIO_BASE_PATH (1)
avatars/users/
string
gitea.config.badges.ENABLED (1)
true
boolean
gitea.config.cors.ALLOW_DOMAIN (1)
https://forgejo.fern.samoth.eu
string
gitea.config.cors.ENABLED (1)
true
boolean
gitea.config.i18n.LANGS (1)
en-US
string
gitea.config.i18n.NAMES (1)
English
string
gitea.config.lfs.MINIO_BASE_PATH (1)
lfs/
string
gitea.config.lfs.PATH (1)
/data/git/lfs
string
gitea.config.other.SHOW_FOOTER_TEMPLATE_LOAD_TIME (1)
false
boolean
gitea.config.repo-archive.MINIO_BASE_PATH (1)
archives/
string
gitea.config.repo-avatar.MINIO_BASE_PATH (1)
avatars/repositories/
string
gitea.config.ssh.minimum_key_sizes.DSA (1)
-1
number
gitea.config.ssh.minimum_key_sizes.ECDSA (1)
-1
number
gitea.config.ssh.minimum_key_sizes.RSA (1)
-1
number
gitea.admin.existingSecret (12)
forgejo-admin-secret
string
gitea.admin.passwordMode (6)
initialOnlyNoReset
string
gitea.admin.email (4)
forgejo@${CLUSTER_SHORT_DOMAIN}
string
gitea.admin.password (2)
notUsed
string
gitea.admin.username (2)
forgejo-admin
string
gitea.metrics.enabled (8)
true
boolean, string
gitea.metrics.serviceMonitor.enabled (7)
true
boolean, string
gitea.oauth[].autoDiscoverUrl (7)
https://auth.${SECRET_DOMAIN}/.well-known/openid-configuration
string
gitea.oauth[].name (7)
Authentik
string
gitea.oauth[].provider (7)
openidConnect
string
gitea.oauth[].scopes (6)
email profile groups
string
gitea.oauth[].existingSecret (4)
forgejo-oauth-secret
string
gitea.oauth[].iconUrl (4)
https://raw.githubusercontent.com/homarr-labs/dashboard-icons/main/png/authentik.png
string
gitea.oauth[].adminGroup (3)
admins
string
gitea.oauth[].groupClaimName (3)
groups
string
gitea.oauth[].key (1)
${client_id}
string
gitea.oauth[].secret (1)
${client_secret}
string
gitea.additionalConfigFromEnvs[].name (4)
FORGEJO__DATABASE__PASSWD
string
gitea.additionalConfigFromEnvs[].valueFrom.secretKeyRef.key (4)
password
string
gitea.additionalConfigFromEnvs[].valueFrom.secretKeyRef.name (4)
postgres-infra-pguser-forgejo
string
gitea.additionalConfigFromEnvs[].value (1)
pooler-forgejo-rw
string
gitea.podAnnotations."reloader.stakater.com/search" (2)
true
string
gitea.livenessProbe.failureThreshold (1)
10
number
gitea.livenessProbe.httpGet.path (1)
/api/healthz
string
gitea.livenessProbe.httpGet.port (1)
http
string
gitea.livenessProbe.initialDelaySeconds (1)
30
number
gitea.livenessProbe.periodSeconds (1)
30
number
gitea.livenessProbe.successThreshold (1)
1
number
gitea.ssh.logLevel (1)
INFO
string
persistence.claimName (15)
forgejo
string
persistence.create (15)
false
boolean
persistence.enabled (14)
true
boolean
persistence.mount (4)
true
boolean
persistence.data.globalMounts[].path (3)
/var/lib/gitea
string
persistence.data.existingClaim (2)
forgejo
string
persistence.data.enabled (1)
true
boolean
persistence.data.path (1)
/mnt/Data/Forgejo
string
persistence.data.server (1)
nas.main.internal
string
persistence.data.type (1)
nfs
string
persistence.config.advancedMounts.main.01-set-config[].path (2)
/config
string
persistence.config.advancedMounts.main.01-set-config[].readOnly (2)
true
boolean
persistence.config.advancedMounts.forgejo.app[].path (1)
/etc/gitea
/data/gitea
/var/lib/gitea/git
string
persistence.config.advancedMounts.forgejo.app[].subPath (1)
gitea-config
gitea-data
gitea-lfs
string
persistence.config.name (2)
forgejo-configmap
string
persistence.config.type (2)
configMap
string
persistence.config.existingClaim (1)
{{ .Release.Name }}
string
persistence.root-ca.advancedMounts.main.app[].path (2)
/etc/ssl/certs/homelab.crt
string
persistence.root-ca.advancedMounts.main.app[].subPath (2)
ec.crt
string
persistence.root-ca.name (2)
homelab-root-ca.crt
string
persistence.root-ca.type (2)
secret
string
persistence.tmp.globalMounts[].path (2)
/tmp
string
persistence.tmp.globalMounts[].subPath (2)
tmp
string
persistence.tmp.type (2)
emptyDir
string
postgresql.enabled (12)
false
boolean
service.ssh.port (11)
22
number
service.ssh.type (11)
LoadBalancer
string
service.ssh.annotations."io.cilium/lb-ipam-ips" (5)
${FORGEJO_ADDRESS}
string
service.ssh.annotations."external-dns.alpha.kubernetes.io/hostname" (4)
git-ssh.18b.haus
string
service.ssh.annotations."lbipam.cilium.io/ips" (2)
192.168.222.125
string
service.ssh.annotations."metallb.io/loadBalancerIPs" (1)
${CLUSTER_EXTERNAL_SUBNET_PREFIX}.${CLUSTER_LB_FORGEJO}
string
service.ssh.externalTrafficPolicy (3)
Local
string
service.ssh.loadBalancerIP (3)
10.0.1.44
string
service.ssh.ipFamilyPolicy (2)
PreferDualStack
string
service.ssh.ipFamilies[] (1)
- IPv4
- IPv6
string
service.http.port (6)
3000
number
service.http.extraPorts[].name (1)
anubis
string
service.http.extraPorts[].port (1)
8080
number
service.http.extraPorts[].targetPort (1)
anubis
string
service.http.type (1)
ClusterIP
string
service.app.ports.http.port (3)
80
number
service.app.ports.ssh.port (2)
22
number
service.annotations."prometheus.io/probe" (2)
true
string
service.annotations."prometheus.io/protocol" (2)
tcp
string
strategy.type (11)
Recreate
string
ingress.enabled (10)
true
boolean
ingress.hosts[].host (5)
git.${SECRET_DOMAIN}
string
ingress.hosts[].paths[].path (5)
/
string
ingress.hosts[].paths[].pathType (5)
Prefix
string
ingress.hosts[].paths[].port (1)
http
string
ingress.tls[].hosts[] (3)
- git.${SECRET_DOMAIN}
string
ingress.tls[].secretName (2)
forgejo-tls
string
ingress.className (2)
external
string
ingress.annotations."cert-manager.io/cluster-issuer" (1)
letsencrypt-production
string
ingress.annotations.external-dns/is-public (1)
true
string
ingress.annotations."external-dns.alpha.kubernetes.io/target" (1)
internal.ewatkins.dev
string
ingress.annotations."gethomepage.dev/description" (1)
Self-hosted lightweight software forge.
string
ingress.annotations."gethomepage.dev/enabled" (1)
true
string
ingress.annotations."gethomepage.dev/group" (1)
Collaboration
string
ingress.annotations."gethomepage.dev/icon" (1)
forgejo
string
ingress.annotations."gethomepage.dev/name" (1)
Forgejo
string
ingress.annotations."hajimari.io/enable" (1)
true
string
ingress.annotations."hajimari.io/group" (1)
tools
string
ingress.annotations."hajimari.io/icon" (1)
simple-icons:forgejo
string
ingress.annotations."hajimari.io/info" (1)
Home Source Repository
string
ingress.annotations."haproxy.org/allow-list" (1)
${HAPROXY_WHITELIST}
string
ingress.annotations."haproxy.org/response-set-header" (1)
Strict-Transport-Security "max-age=31536000" X-Frame-Options "DENY" X-Content-Type-Options "nosniff" Referrer-Policy "strict-origin-when-cross-origin"
string
ingress.annotations."haproxy.org/ssl-redirect-port" (1)
443
string
ingress.annotations."nginx.ingress.kubernetes.io/enable-global-auth" (1)
false
string
ingress.annotations."nginx.ingress.kubernetes.io/force-ssl-redirect" (1)
true
string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-body-size" (1)
8000m
string
ingress.annotations."nginx.ingress.kubernetes.io/ssl-passthrough" (1)
true
string
postgresql-ha.enabled (10)
false
boolean
valkey-cluster.enabled (8)
false
boolean
redis-cluster.enabled (7)
false
boolean
resources.limits.memory (7)
2Gi
string
resources.limits.cpu (3)
2000m
string
resources.requests.cpu (7)
10m
string
resources.requests.memory (7)
237Mi
string
image.rootless (6)
true
boolean
image.repository (4)
forgejo/forgejo
string
image.tag (4)
14.0.2
string
image.registry (3)
code.forgejo.org
string
image.digest (1)
sha256:d07a623ff4da1a78baab6f3ba0b3273268efd305c73cbc597e1ebe735b77e6b1
string
deployment.annotations."secret.reloader.stakater.com/reload" (5)
forgejo-secret
string
deployment.annotations."reloader.stakater.com/auto" (1)
true
string
deployment.terminationGracePeriodSeconds (1)
600
number
replicaCount (5)
1
number
containerSecurityContext.allowPrivilegeEscalation (4)
false
boolean
containerSecurityContext.capabilities.add[] (4)
- SYS_CHROOT
string
containerSecurityContext.capabilities.drop[] (1)
- ALL
string
containerSecurityContext.readOnlyRootFilesystem (4)
true
boolean
containerSecurityContext.runAsGroup (3)
1000
number
containerSecurityContext.runAsNonRoot (3)
true
boolean
containerSecurityContext.runAsUser (3)
1000
number
podSecurityContext.fsGroup (4)
1000
number
podSecurityContext.fsGroupChangePolicy (1)
OnRootMismatch
string
podSecurityContext.runAsGroup (1)
1000
number
podSecurityContext.runAsNonRoot (1)
true
boolean
podSecurityContext.runAsUser (1)
1000
number
podSecurityContext.seccompProfile.type (1)
RuntimeDefault
string
checkDeprecation (3)
true
boolean
defaultPodOptions.securityContext.fsGroup (3)
1000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (3)
OnRootMismatch
string
defaultPodOptions.securityContext.runAsGroup (3)
1000
number
defaultPodOptions.securityContext.runAsNonRoot (3)
true
boolean
defaultPodOptions.securityContext.runAsUser (3)
1000
number
defaultPodOptions.securityContext.seccompProfile.type (2)
RuntimeDefault
string
defaultPodOptions.automountServiceAccountToken (2)
false
boolean
defaultPodOptions.dnsConfig.options[].name (2)
ndots
string
defaultPodOptions.dnsConfig.options[].value (2)
1
string
defaultPodOptions.enableServiceLinks (2)
false
boolean
defaultPodOptions.labels."egress.cilium.io/auth" (2)
true
string
defaultPodOptions.labels."egress.cilium.io/smtp-relay" (2)
true
string
extraVolumes[].name (3)
ssh-key
string
extraVolumes[].secret.secretName (2)
forgejo-ssh-keys
string
extraVolumes[].secret.items[].key (1)
gitconfig
string
extraVolumes[].secret.items[].path (1)
.gitconfig
string
extraVolumes[].configMap.defaultMode (1)
555
number
extraVolumes[].configMap.name (1)
anubis-bot-policy
string
httpRoute.enabled (3)
true
boolean
httpRoute.hostnames[] (3)
- forgejo.${SECRET_DOMAIN_INTERNAL}
string
httpRoute.parentRefs[].name (3)
envoy-internal
string
httpRoute.parentRefs[].namespace (3)
networking
string
httpRoute.parentRefs[].sectionName (1)
https
string
httpRoute.rules[].backendRefs[].name (1)
forgejo-http
string
httpRoute.rules[].backendRefs[].namespace (1)
development
string
httpRoute.rules[].backendRefs[].port (1)
anubis
string
route.app.annotations."gatus.home-operations.com/endpoint" (3)
name: forgejo
string
route.app.hostnames[] (3)
- git.${ROOT_DOMAIN}
string
route.app.parentRefs[].name (3)
envoy-internal
string
route.app.parentRefs[].namespace (3)
network
string
route.app.rules[].backendRefs[].name (2)
forgejo
string
route.app.rules[].backendRefs[].port (2)
80
number
route.app.rules[].filters[].requestRedirect.path.replaceFullPath (2)
/user/oauth2/Pocket ID
string
route.app.rules[].filters[].requestRedirect.path.type (2)
ReplaceFullPath
string
route.app.rules[].filters[].requestRedirect.statusCode (2)
301
number
route.app.rules[].filters[].responseHeaderModifier.set[].name (2)
Content-Security-Policy
string
route.app.rules[].filters[].responseHeaderModifier.set[].value (2)
default-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';
string
route.app.rules[].filters[].type (2)
ResponseHeaderModifier
RequestRedirect
string
route.app.rules[].matches[].path.type (2)
PathPrefix
string
route.app.rules[].matches[].path.value (2)
/user/login
string
route.ssh.kind (2)
TCPRoute
string
route.ssh.parentRefs[].name (2)
envoy-internal
string
route.ssh.parentRefs[].namespace (2)
network
string
route.ssh.parentRefs[].sectionName (2)
ssh
string
route.ssh.rules[].backendRefs[].name (2)
forgejo
string
route.ssh.rules[].backendRefs[].port (2)
22
number
test.enabled (3)
true
boolean
test.image.name (3)
busybox
string
test.image.tag (3)
latest
string
controllers.main.containers.app.env.FORGEJO__mailer__FROM (2)
${CLUSTER_NAME}@${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__mailer__SMTP_ADDR (2)
smtp-relay.network.svc.cluster.local
string
controllers.main.containers.app.env.FORGEJO__mailer__SMTP_PORT (2)
25
string
controllers.main.containers.app.env.FORGEJO__openid__WHITELISTED_URIS (2)
id.${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__server__DOMAIN (2)
git.${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__server__HTTP_PORT (2)
80
number
controllers.main.containers.app.env.FORGEJO__server__ROOT_URL (2)
https://git.${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__server__SSH_DOMAIN (2)
git.${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__server__SSH_PORT (2)
22
number
controllers.main.containers.app.env.FORGEJO__time__DEFAULT_UI_LOCATION (2)
Europe/Warsaw
string
controllers.main.containers.app.env.TZ (2)
Europe/Warsaw
string
controllers.main.containers.app.envFrom[].secretRef.name (2)
forgejo-secret
string
controllers.main.containers.app.image.repository (2)
codeberg.org/forgejo/forgejo
string
controllers.main.containers.app.image.tag (2)
14.0.2-rootless@sha256:5552c9e25f353760420b8ac7a7f0f0a788ff571bbfd8e2c1e93503d3e2e1b87a
string
controllers.main.containers.app.probes.liveness.custom (2)
true
boolean
controllers.main.containers.app.probes.liveness.enabled (2)
true
boolean
controllers.main.containers.app.probes.liveness.spec.failureThreshold (2)
3
number
controllers.main.containers.app.probes.liveness.spec.httpGet.path (2)
/api/healthz
string
controllers.main.containers.app.probes.liveness.spec.httpGet.port (2)
80
number
controllers.main.containers.app.probes.liveness.spec.initialDelaySeconds (2)
0
number
controllers.main.containers.app.probes.liveness.spec.periodSeconds (2)
10
number
controllers.main.containers.app.probes.liveness.spec.timeoutSeconds (2)
1
number
controllers.main.containers.app.probes.readiness.custom (2)
true
boolean
controllers.main.containers.app.probes.readiness.enabled (2)
true
boolean
controllers.main.containers.app.probes.readiness.spec.failureThreshold (2)
3
number
controllers.main.containers.app.probes.readiness.spec.httpGet.path (2)
/api/healthz
string
controllers.main.containers.app.probes.readiness.spec.httpGet.port (2)
80
number
controllers.main.containers.app.probes.readiness.spec.initialDelaySeconds (2)
0
number
controllers.main.containers.app.probes.readiness.spec.periodSeconds (2)
10
number
controllers.main.containers.app.probes.readiness.spec.timeoutSeconds (2)
1
number
controllers.main.containers.app.resources.limits.memory (2)
2048Mi
string
controllers.main.containers.app.resources.requests.cpu (2)
10m
string
controllers.main.containers.app.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.main.containers.app.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.main.containers.app.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.main.initContainers.01-set-config.command[] (2)
- /bin/sh
- -c
- mkdir -p /var/lib/gitea/custom/conf cp /config/app.ini /var/lib/gitea/custom/conf/app.ini
string
controllers.main.initContainers.01-set-config.image.repository (2)
ghcr.io/home-operations/busybox
string
controllers.main.initContainers.01-set-config.image.tag (2)
1.37.0@sha256:026ed7273270ec08f6902b4ae8334c23b473e5394bec3bbbdbfe580c710d50bc
string
controllers.main.initContainers.01-set-config.resources.requests.cpu (2)
5m
string
controllers.main.initContainers.01-set-config.resources.requests.memory (2)
10M
string
controllers.main.initContainers.01-set-config.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.main.initContainers.01-set-config.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.main.initContainers.01-set-config.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.forgejo.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.forgejo.containers.app.env.TZ (1)
${TIMEZONE}
string
controllers.forgejo.containers.app.env.USER_GID (1)
1000
number
controllers.forgejo.containers.app.env.USER_UID (1)
1000
number
controllers.forgejo.containers.app.envFrom[].secretRef.name (1)
forgejo-secret
string
controllers.forgejo.containers.app.image.pullPolicy (1)
IfNotPresent
string
controllers.forgejo.containers.app.image.repository (1)
codeberg.org/forgejo/forgejo
string
controllers.forgejo.containers.app.image.tag (1)
14.0.2-rootless@sha256:5552c9e25f353760420b8ac7a7f0f0a788ff571bbfd8e2c1e93503d3e2e1b87a
string
controllers.forgejo.initContainers.init-db.envFrom[].secretRef.name (1)
forgejo-secret
string
controllers.forgejo.initContainers.init-db.image.repository (1)
ghcr.io/home-operations/postgres-init
string
controllers.forgejo.initContainers.init-db.image.tag (1)
18.1.0@sha256:3c54d39f19fdb82ed5b3f286450e4071133cc6025bd0e25856bc2c522f8fc030
string
extraContainerVolumeMounts[].mountPath (2)
/ssh
string
extraContainerVolumeMounts[].name (2)
ssh-key
string
extraContainerVolumeMounts[].readOnly (2)
true
boolean
extraContainerVolumeMounts[].defaultMode (1)
400
number
extraContainerVolumeMounts[].subPath (1)
.gitconfig
string
extraContainers[].env[].name (1)
BIND
DIFFICULTY
TARGET
POLICY_FNAME
string
extraContainers[].env[].value (1)
:8080
2
http://localhost:3000
/etc/anubisBotPolicy.json
string
extraContainers[].image (1)
ghcr.io/techarohq/anubis:v1.24.0@sha256:4bdf6ddd1a8dc8bfe7a33d823a1cb72157885ca4fd3ee749654b21cba732e439
string
extraContainers[].imagePullPolicy (1)
Always
string
extraContainers[].name (1)
anubis
string
extraContainers[].ports[].containerPort (1)
8080
number
extraContainers[].ports[].name (1)
anubis
string
extraContainers[].securityContext.allowPrivilegeEscalation (1)
false
boolean
extraContainers[].securityContext.capabilities.drop[] (1)
- ALL
string
extraContainers[].securityContext.runAsGroup (1)
1000
number
extraContainers[].securityContext.runAsNonRoot (1)
true
boolean
extraContainers[].securityContext.runAsUser (1)
1000
number
extraContainers[].securityContext.seccompProfile.type (1)
RuntimeDefault
string
extraContainers[].volumeMounts[].mountPath (1)
/etc/anubisBotPolicy.json
string
extraContainers[].volumeMounts[].name (1)
anubis-bot-policy
string
extraContainers[].volumeMounts[].readOnly (1)
true
boolean
extraContainers[].volumeMounts[].subPath (1)
anubisBotPolicy.json
string
global.hostAliases[].hostnames[] (1)
- ${GITLAB_MIRROR_HOST:=gitlab-proxy}
string
global.hostAliases[].ip (1)
192.168.69.127
string
global.priorityClassName (1)
cluster-low
string
livenessProbe.enabled (1)
true
boolean
livenessProbe.failureThreshold (1)
5
number
livenessProbe.initialDelaySeconds (1)
300
number
livenessProbe.periodSeconds (1)
30
number
livenessProbe.successThreshold (1)
1
number
livenessProbe.timeoutSeconds (1)
10
number
memcached.enabled (1)
false
boolean
readinessProbe.enabled (1)
true
boolean
readinessProbe.failureThreshold (1)
5
number
readinessProbe.initialDelaySeconds (1)
60
number
readinessProbe.periodSeconds (1)
20
number
readinessProbe.successThreshold (1)
1
number
readinessProbe.timeoutSeconds (1)
10
number
serviceAccount.create (1)
true
boolean
startupProbe.enabled (1)
true
boolean
startupProbe.failureThreshold (1)
30
number
startupProbe.initialDelaySeconds (1)
60
number
startupProbe.periodSeconds (1)
10
number
startupProbe.successThreshold (1)
1
number
startupProbe.timeoutSeconds (1)
5
number
valkey.enabled (1)
false
boolean