forgejo helm

No introduction found. Create it?

Install

Install with:

helm repo add forgejo oci://code.forgejo.org/forgejo-helm/forgejo
helm install forgejo forgejo/forgejo -f values.yaml

Examples

See examples from other people.

Top Repositories (2 out of 25)

NameRepoStarsVersionTimestamp
forgejoangelnu/k8s-gitops18216.2.0a month ago
forgejodrag0n141/home-ops5316.2.12 months ago

Resources

100Mi128Mi237Mi256Mi512Mi1024Mi2048Mi4096Mi
237Mi512Mi1024Mi2048Mi4096Mi24576Mi
10m15m50m100m500m

Values

See the most popular values for this chart:

KeyTypes
persistence.claimName (21)
forgejo
string
persistence.enabled (19)
true
boolean
persistence.create (18)
false
boolean
persistence.mount (4)
true
boolean
persistence.data.globalMounts[].path (3)
/var/lib/gitea
string
persistence.data.existingClaim (2)
forgejo
string
persistence.data.enabled (1)
true
boolean
persistence.data.path (1)
/mnt/Data/Forgejo
string
persistence.data.server (1)
nas.main.internal
string
persistence.data.type (1)
nfs
string
persistence.config.advancedMounts.main.01-set-config[].path (2)
/config
string
persistence.config.advancedMounts.main.01-set-config[].readOnly (2)
true
boolean
persistence.config.advancedMounts.forgejo.app[].path (1)
/etc/gitea
/data/gitea
/var/lib/gitea/git
string
persistence.config.advancedMounts.forgejo.app[].subPath (1)
gitea-config
gitea-data
gitea-lfs
string
persistence.config.name (2)
forgejo-configmap
string
persistence.config.type (2)
configMap
string
persistence.config.existingClaim (1)
{{ .Release.Name }}
string
persistence.root-ca.advancedMounts.main.app[].path (2)
/etc/ssl/certs/homelab.crt
string
persistence.root-ca.advancedMounts.main.app[].subPath (2)
ec.crt
string
persistence.root-ca.name (2)
homelab-root-ca.crt
string
persistence.root-ca.type (2)
secret
string
persistence.size (2)
${VOLSYNC_CAPACITY}
string
persistence.tmp.globalMounts[].path (2)
/tmp
string
persistence.tmp.globalMounts[].subPath (2)
tmp
string
persistence.tmp.type (2)
emptyDir
string
persistence.storageClass (1)
openebs-hostpath
string
gitea.config.service.DISABLE_REGISTRATION (20)
true
boolean
gitea.config.service.ALLOW_ONLY_EXTERNAL_REGISTRATION (12)
true
boolean
gitea.config.service.SHOW_REGISTRATION_BUTTON (11)
false
boolean
gitea.config.service.ENABLE_NOTIFY_MAIL (9)
true
boolean
gitea.config.service.DEFAULT_KEEP_EMAIL_PRIVATE (8)
true
boolean
gitea.config.service.DEFAULT_ALLOW_CREATE_ORGANIZATION (5)
true
boolean
gitea.config.service.REQUIRE_SIGNIN_VIEW (5)
true
boolean
gitea.config.service.DEFAULT_ENABLE_TIMETRACKING (3)
true
boolean
gitea.config.service.ENABLE_INTERNAL_SIGNIN (3)
false
boolean
gitea.config.service.AUTO_WATCH_NEW_REPOS (2)
true
boolean
gitea.config.service.ENABLE_PASSKEY_AUTHENTICATION (2)
false
boolean
gitea.config.service.ENABLE_USER_HEATMAP (2)
true
boolean
gitea.config.service."EXPLORE.REQUIRE_SIGNIN_VIEW" (2)
false
boolean
gitea.config.service.MAX_CREATION_LIMIT (2)
100
number
gitea.config.service.REGISTER_EMAIL_CONFIRM (2)
true
boolean
gitea.config.service.VALID_SITE_URL_SCHEMES (2)
https
string
gitea.config.service.DEFAULT_ORG_VISIBILITY (1)
limited
string
gitea.config.service.DEFAULT_USER_IS_RESTRICTED (1)
true
boolean
gitea.config.service.DEFAULT_USER_VISIBILITY (1)
limited
string
gitea.config.service.ENABLE_BASIC_AUTHENTICATION (1)
false
boolean
gitea.config.service.ENABLE_CAPTCHA (1)
true
boolean
gitea.config.service.ENABLE_PASSWORD_SIGNIN_FORM (1)
false
boolean
gitea.config.service.explore.REQUIRE_SIGNIN_VIEW (1)
true
boolean
gitea.config.service.REQUIRE_CAPTCHA_FOR_LOGIN (1)
true
boolean
gitea.config.service.REQUIRE_EXTERNAL_REGISTRATION_CAPTCHA (1)
true
boolean
gitea.config.database.DB_TYPE (19)
postgres
string
gitea.config.database.HOST (8)
postgres17-rw.database.svc.cluster.local:5432
string
gitea.config.database.SSL_MODE (8)
disable
string
gitea.config.database.NAME (6)
forgejo
string
gitea.config.database.SCHEMA (3)
public
string
gitea.config.database.USER (3)
forgejo
string
gitea.config.database.LOG_SQL (2)
false
boolean
gitea.config.database.PATH (2)
/data/gitea.db
string
gitea.config.database.SLOW_QUERY_THRESHOLD (2)
5s
string
gitea.config.database.SQLITE_JOURNAL_MODE (2)
wal
string
gitea.config.database.MAX_OPEN_CONNS (1)
10
number
gitea.config.database.PASSWD (1)
${POSTGRES_FORGEJO_PASSWORD}
string
gitea.config.cache.ADAPTER (18)
redis
string
gitea.config.cache.HOST (14)
redis://redis.database.svc.cluster.local:6379/11
string
gitea.config.cache.ENABLED (5)
true
boolean
gitea.config.server.ROOT_URL (17)
https://git.${SECRET_DOMAIN}
string
gitea.config.server.SSH_PORT (16)
22
number
gitea.config.server.SSH_DOMAIN (15)
git.${SECRET_DOMAIN}
string
gitea.config.server.DOMAIN (13)
git.${SECRET_DOMAIN}
string
gitea.config.server.SSH_LISTEN_PORT (12)
2222
number
gitea.config.server.LANDING_PAGE (10)
explore
string
gitea.config.server.OFFLINE_MODE (10)
true
boolean
gitea.config.server.DISABLE_SSH (5)
false
boolean
gitea.config.server.LFS_START_SERVER (5)
true
boolean
gitea.config.server.ENABLE_GZIP (3)
true
boolean
gitea.config.server.START_SSH_SERVER (3)
true
boolean
gitea.config.server.MINIMUM_KEY_SIZE_CHECK (2)
true
boolean
gitea.config.server.SSH_SERVER_HOST_KEYS (2)
/ssh/forgejo
string
gitea.config.server.APP_DATA_PATH (1)
/data/gitea
string
gitea.config.server.ENABLE_PPROF (1)
false
boolean
gitea.config.server.LFS_HTTP_AUTH_EXPIRY (1)
20m
string
gitea.config.mailer.ENABLED (16)
true
boolean
gitea.config.mailer.FROM (15)
Sky M Tmi's Forgejo <forgejo@${SECRET_DOMAIN_2}>
string
gitea.config.mailer.SMTP_PORT (13)
25
string, number
gitea.config.mailer.PROTOCOL (12)
smtp
string
gitea.config.mailer.SMTP_ADDR (12)
smtp-relay.default
string
gitea.config.mailer.USER (5)

string
gitea.config.mailer.PASSWD (4)

string
gitea.config.queue.TYPE (16)
redis
string
gitea.config.queue.CONN_STR (13)
redis://redis.database.svc.cluster.local:6379/10
string
gitea.config.session.PROVIDER (16)
redis
string
gitea.config.session.PROVIDER_CONFIG (12)
redis://redis.database.svc.cluster.local:6379/12
string
gitea.config.session.COOKIE_SECURE (4)
true
boolean
gitea.config.session.SAME_SITE (4)
lax
string
gitea.config.session.COOKIE_NAME (3)
forgejo_session
string
gitea.config.session.DOMAIN (3)
git.nikola.wtf
string
gitea.config.session.SESSION_LIFE_TIME (3)
86400
number
gitea.config.APP_NAME (15)
Forgejo
string
gitea.config.repository.DEFAULT_PRIVATE (14)
private
string, boolean
gitea.config.repository.DEFAULT_BRANCH (7)
main
string
gitea.config.repository.ENABLE_PUSH_CREATE_USER (6)
true
boolean
gitea.config.repository.DISABLE_HTTP_GIT (3)
false
boolean
gitea.config.repository.ROOT (3)
/data/git/repositories
string
gitea.config.repository.pull-request.WORK_IN_PROGRESS_PREFIXES (2)
WIP:,[WIP]:
string
gitea.config.repository.ACCESS_CONTROL_ALLOW_ORIGIN (1)
https://forgejo.fern.samoth.eu
string
gitea.config.repository.DEFAULT_PUSH_CREATE_PRIVATE (1)
false
boolean
gitea.config.repository.DEFAULT_REPO_UNITS (1)
repo.code,repo.releases,repo.issues,repo.pulls,repo.actions
string
gitea.config.repository.FORCE_PRIVATE (1)
true
boolean
gitea.config.repository.signing.CRUD_ACTIONS (1)
pubkey, parentsigned
string
gitea.config.repository.signing.FORMAT (1)
ssh
string
gitea.config.repository.signing.INITIAL_COMMIT (1)
pubkey
string
gitea.config.repository.signing.MERGES (1)
pubkey, basesigned, commitssigned
string
gitea.config.repository.signing.SIGNING_EMAIL (1)
forgejo@${SECRET_DOMAIN}
string
gitea.config.repository.signing.SIGNING_KEY (1)
/data/ssh/id_ecdsa.pub
string
gitea.config.repository.signing.SIGNING_NAME (1)
Forgejo
string
gitea.config.repository.signing.WIKI (1)
never
string
gitea.config.openid.ENABLE_OPENID_SIGNIN (11)
false
boolean
gitea.config.openid.ENABLE_OPENID_SIGNUP (8)
true
boolean
gitea.config.openid.WHITELISTED_URIS (3)
identity.18b.haus
string
gitea.config.openid.UPDATE_AVATAR (2)
true
boolean
gitea.config.openid.USERNAME (1)
preferred_username
string
gitea.config.cron.ENABLED (10)
true
boolean
gitea.config.cron.git_gc_repos.ENABLED (4)
true
boolean
gitea.config.cron.git_gc_repos.ARGS (3)
--aggressive --auto
string
gitea.config.cron.git_gc_repos.SCHEDULE (3)
@every 168h
string
gitea.config.cron.git_gc_repos.TIMEOUT (3)
60s
string
gitea.config.cron.update_mirrors.SCHEDULE (4)
@every 10m
string
gitea.config.cron.update_mirrors.PULL_LIMIT (3)
50
number
gitea.config.cron.update_mirrors.PUSH_LIMIT (3)
50
number
gitea.config.cron.cleanup_actions.ENABLED (3)
true
boolean
gitea.config.cron.cleanup_actions.SCHEDULE (3)
@midnight
string
gitea.config.cron.archive_cleanup.OLDER_THAN (2)
2h
string
gitea.config.cron.archive_cleanup.SCHEDULE (2)
@hourly
string
gitea.config.cron.archive_cleanup.ENABLED (1)
false
boolean
gitea.config.cron.update_checker.ENABLED (1)
false
boolean
gitea.config.security.PASSWORD_COMPLEXITY (9)
spec
string
gitea.config.security.REVERSE_PROXY_LIMIT (5)
1
number
gitea.config.security.REVERSE_PROXY_TRUSTED_PROXIES (5)
10.50.0.0/24
string
gitea.config.security.MIN_PASSWORD_LENGTH (4)
12
number
gitea.config.security.existingSecret (3)
forgejo-secret
string
gitea.config.security.PASSWORD_HASH_ALGO (3)
argon2
string
gitea.config.security.PASSWORD_CHECK_PWN (2)
true
boolean
gitea.config.security.INSTALL_LOCK (1)
true
boolean
gitea.config.security.UPDATE_AVATAR (1)
true
boolean
gitea.config.storage.STORAGE_TYPE (9)
minio
string
gitea.config.storage.MINIO_BUCKET (8)
forgejo
string
gitea.config.storage.MINIO_ENDPOINT (8)
minio.default.svc:9000
string
gitea.config.storage.MINIO_USE_SSL (8)
true
boolean
gitea.config.storage.MINIO_LOCATION (7)
us-east-1
string
gitea.config.storage.MINIO_INSECURE_SKIP_VERIFY (4)
false
boolean
gitea.config.storage.actions_log.MINIO_BASE_PATH (1)
actions/logs/
string
gitea.config.storage.MINIO_CHECKSUM_ALGORITHM (1)
md5
string
gitea.config.storage.MINIO_RETRY_COUNT (1)
3
number
gitea.config.storage.MINIO_TIMEOUT (1)
30s
string
gitea.config.indexer.REPO_INDEXER_ENABLED (8)
true
boolean
gitea.config.indexer.ISSUE_INDEXER_TYPE (6)
db
string
gitea.config.indexer.REPO_INDEXER_REPO_TYPES (5)
sources,forks,mirrors,templates
string
gitea.config.migrations.ALLOWED_DOMAINS (8)
*
string
gitea.config.migrations.ALLOW_LOCALNETWORKS (5)
true
boolean
gitea.config.migrations.SKIP_TLS_VERIFY (2)
true
boolean
gitea.config.migrations.ALLOW_DOMAINS (1)
github.com, *.github.com, *.${SECRET_DOMAIN}, *.jonathanrosshart.com, gitlab.com, *.gitlab.com
string
gitea.config.migrations.MAX_ATTEMPTS (1)
3
number
gitea.config.migrations.RETRY_BACKOFF (1)
3
number
gitea.config.webhook.ALLOWED_HOST_LIST (8)
*.${SECRET_DOMAIN}
string
gitea.config.webhook.DELIVER_TIMEOUT (2)
10
number
gitea.config.webhook.SKIP_TLS_VERIFY (2)
false
boolean
gitea.config.ui.DEFAULT_THEME (7)
gitea-dark
string
gitea.config.ui.SHOW_USER_EMAIL (5)
false
boolean
gitea.config.ui.AMBIGUOUS_UNICODE_DETECTION (3)
true
boolean
gitea.config.ui.DEFAULT_SHOW_FULL_NAME (3)
true
boolean
gitea.config.ui.FEED_MAX_COMMIT_NUM (3)
10
number
gitea.config.ui.GRAPH_MAX_COMMIT_NUM (3)
100
number
gitea.config.actions.ENABLED (5)
true
boolean
gitea.config.actions.ARTIFACT_RETENTION_DAYS (3)
90
number
gitea.config.actions.DEFAULT_ACTIONS_URL (3)
https://github.com
string
gitea.config.actions.LOG_COMPRESSION (3)
zstd
string
gitea.config.actions.LOG_RETENTION_DAYS (3)
365
number
gitea.config.actions.ARTIFACT_DOWNLOAD_TIMEOUT (1)
15m
string
gitea.config.actions.ARTIFACT_MAX_CONCURRENT_UPLOADS (1)
5
number
gitea.config.actions.ARTIFACT_MAX_SIZE (1)
1073741824
number
gitea.config.actions.ARTIFACT_UPLOAD_TIMEOUT (1)
60m
string
gitea.config.actions.artifacts.MINIO_BASE_PATH (1)
actions/artifacts/
string
gitea.config.actions.ENDLESS_TASK_TIMEOUT (1)
8h
string
gitea.config.actions.ZOMBIE_TASK_TIMEOUT (1)
15m
string
gitea.config.time.DEFAULT_UI_LOCATION (5)
${TZ}
string
gitea.config.admin.DISABLE_REGULAR_ORG_CREATION (4)
true
boolean
gitea.config.admin.SEND_NOTIFICATION_EMAIL_ON_NEW_USER (2)
true
boolean
gitea.config.admin.DEFAULT_EMAIL_NOTIFICATIONS (1)
disabled
string
gitea.config.federation.ENABLED (4)
true
boolean
gitea.config.federation.MAX_SIZE (1)
4
number
gitea.config.federation.SHARE_USER_STATISTICS (1)
true
boolean
gitea.config.metrics.ENABLED (4)
true
boolean
gitea.config.metrics.serviceMonitor.enabled (3)
true
boolean
gitea.config.metrics.serviceMonitor.namespace (3)
monitoring
string
gitea.config.metrics.serviceMonitor.additionalLabels.release (2)
kube-prometheus-stack
string
gitea.config.oauth2_client.ENABLE_AUTO_REGISTRATION (4)
true
boolean
gitea.config.oauth2_client.UPDATE_AVATAR (4)
true
boolean
gitea.config.oauth2_client.ACCOUNT_LINKING (2)
auto
string
gitea.config.oauth2_client.OPENID_CONNECT_SCOPES (2)
openid email profile groups
string
gitea.config.oauth2_client.USERNAME (2)
preferred_username
string
gitea.config.git.DISABLE_DIFF_HIGHLIGHT (3)
false
boolean
gitea.config.git.ENABLE_AUTO_GIT_WIRE_PROTOCOL (3)
true
boolean
gitea.config.git.MAX_GIT_DIFF_FILES (3)
100
number
gitea.config.git.MAX_GIT_DIFF_LINES (3)
1000
number
gitea.config.git.PULL_REQUEST_PUSH_MESSAGE (3)
true
boolean
gitea.config.git.VERBOSE_PUSH (3)
true
boolean
gitea.config.lfs.PATH (3)
/data/git/lfs
string
gitea.config.lfs.MINIO_BASE_PATH (1)
lfs/
string
gitea.config.log.LEVEL (3)
info
string
gitea.config.log.file.LEVEL (2)
Debug
string
gitea.config.log.MODE (2)
console, file
string
gitea.config.log.ACCESS (1)
file
string
gitea.config.log.LOGGER_ACCESS_MODE (1)
file
string
gitea.config.markdown.ENABLE_HARD_LINE_BREAK_IN_COMMENTS (3)
true
boolean
gitea.config.markdown.ENABLE_MATH (3)
true
boolean
gitea.config.oauth2.ACCOUNT_LINKING (3)
auto
string
gitea.config.oauth2.ENABLE_AUTO_REGISTRATION (3)
true
boolean
gitea.config.oauth2.UPDATE_AVATAR (3)
true
boolean
gitea.config.oauth2.USERNAME (3)
nickname
string
gitea.config.oauth2.OPENID_CONNECT_SCOPES (2)
openid email groups
string
gitea.config.oauth2.EANBLED (1)
false
boolean
gitea.config.qos.ENABLED (3)
true
boolean
gitea.config.api.DEFAULT_PAGING_NUM (2)
30
number
gitea.config.api.ENABLE_SWAGGER (2)
true
boolean
gitea.config.api.MAX_RESPONSE_ITEMS (2)
50
number
gitea.config.APP_SLOGAN (2)

string
gitea.config.other.SHOW_FOOTER_VERSION (2)
false
boolean
gitea.config.other.SHOW_FOOTER_TEMPLATE_LOAD_TIME (1)
false
boolean
gitea.config.packages.ENABLED (2)
false
boolean
gitea.config.packages.LIMIT_SIZE_CONTAINER (2)
2 GiB
string
gitea.config.packages.container.ENABLED (1)
true
boolean
gitea.config.packages.MINIO_BASE_PATH (1)
packages/
string
gitea.config.attachment.MINIO_BASE_PATH (1)
attachments/
string
gitea.config.attachment.MINIO_BUCKET (1)
forgejo
string
gitea.config.attachment.MINIO_ENDPOINT (1)
s3.${SECRET_DOMAIN_INTERNAL}
string
gitea.config.attachment.MINIO_LOCATION (1)
us-east-1
string
gitea.config.attachment.MINIO_USE_SSL (1)
true
boolean
gitea.config.attachment.STORAGE_TYPE (1)
minio
string
gitea.config.avatar.MINIO_BASE_PATH (1)
avatars/users/
string
gitea.config.badges.ENABLED (1)
true
boolean
gitea.config.cors.ALLOW_DOMAIN (1)
https://forgejo.fern.samoth.eu
string
gitea.config.cors.ENABLED (1)
true
boolean
gitea.config.i18n.LANGS (1)
en-US
string
gitea.config.i18n.NAMES (1)
English
string
gitea.config.repo-archive.MINIO_BASE_PATH (1)
archives/
string
gitea.config.repo-avatar.MINIO_BASE_PATH (1)
avatars/repositories/
string
gitea.config.ssh.minimum_key_sizes.DSA (1)
-1
number
gitea.config.ssh.minimum_key_sizes.ECDSA (1)
-1
number
gitea.config.ssh.minimum_key_sizes.RSA (1)
-1
number
gitea.admin.existingSecret (15)
forgejo-admin-secret
string
gitea.admin.passwordMode (7)
keepUpdated
string
gitea.admin.username (6)
kryptonian
string
gitea.admin.email (5)
forgejo@${CLUSTER_SHORT_DOMAIN}
string
gitea.admin.password (2)
notUsed
string
gitea.metrics.enabled (10)
true
boolean, string
gitea.metrics.serviceMonitor.enabled (9)
true
boolean, string
gitea.metrics.serviceMonitor.namespace (1)
observability
string
gitea.oauth[].autoDiscoverUrl (9)
https://auth.${SECRET_DOMAIN}/.well-known/openid-configuration
string
gitea.oauth[].name (9)
Authentik
string
gitea.oauth[].provider (9)
openidConnect
string
gitea.oauth[].existingSecret (6)
forgejo-oauth-secret
string
gitea.oauth[].scopes (6)
email profile groups
string
gitea.oauth[].iconUrl (5)
https://raw.githubusercontent.com/homarr-labs/dashboard-icons/main/png/authentik.png
string
gitea.oauth[].adminGroup (4)
admins
string
gitea.oauth[].groupClaimName (4)
groups
string
gitea.oauth[].key (1)
${client_id}
string
gitea.oauth[].secret (1)
${client_secret}
string
gitea.additionalConfigFromEnvs[].name (5)
FORGEJO__DATABASE__PASSWD
string
gitea.additionalConfigFromEnvs[].valueFrom.secretKeyRef.key (5)
password
string
gitea.additionalConfigFromEnvs[].valueFrom.secretKeyRef.name (5)
postgres-infra-local-pguser-forgejo
string
gitea.additionalConfigFromEnvs[].value (1)
pooler-forgejo-rw
string
gitea.additionalConfigSources[].secret.secretName (2)
forgejo-secret
string
gitea.livenessProbe.failureThreshold (2)
10
number
gitea.livenessProbe.httpGet.path (2)
/api/healthz
string
gitea.livenessProbe.httpGet.port (2)
http
string
gitea.livenessProbe.initialDelaySeconds (2)
30
number
gitea.livenessProbe.periodSeconds (2)
30
number
gitea.livenessProbe.successThreshold (2)
1
number
gitea.podAnnotations."reloader.stakater.com/search" (2)
true
string
gitea.ssh.logLevel (2)
INFO
string
postgresql.enabled (17)
false
boolean
postgresql-ha.enabled (15)
false
boolean
strategy.type (15)
Recreate
string
ingress.enabled (13)
false
boolean
ingress.hosts[].host (5)
git.${SECRET_DOMAIN}
string
ingress.hosts[].paths[].path (5)
/
string
ingress.hosts[].paths[].pathType (5)
Prefix
string
ingress.hosts[].paths[].port (2)
http
string
ingress.tls[].hosts[] (4)
- git.${SECRET_DOMAIN}
string
ingress.tls[].secretName (3)
forgejo-tls
string
ingress.annotations."cert-manager.io/cluster-issuer" (2)
letsencrypt-production
string
ingress.annotations.external-dns/is-public (1)
true
string
ingress.annotations."flame.pawelmalak/icon" (1)
code
string
ingress.annotations."flame.pawelmalak/name" (1)
Forgejo
string
ingress.annotations."flame.pawelmalak/type" (1)
application
string
ingress.annotations."flame.pawelmalak/url" (1)
https://code.eno1.dev
string
ingress.annotations."gethomepage.dev/description" (1)
Self-hosted lightweight software forge.
string
ingress.annotations."gethomepage.dev/enabled" (1)
true
string
ingress.annotations."gethomepage.dev/group" (1)
Collaboration
string
ingress.annotations."gethomepage.dev/icon" (1)
forgejo
string
ingress.annotations."gethomepage.dev/name" (1)
Forgejo
string
ingress.annotations."hajimari.io/enable" (1)
true
string
ingress.annotations."hajimari.io/group" (1)
tools
string
ingress.annotations."hajimari.io/icon" (1)
simple-icons:forgejo
string
ingress.annotations."hajimari.io/info" (1)
Home Source Repository
string
ingress.annotations."haproxy.org/allow-list" (1)
${HAPROXY_WHITELIST}
string
ingress.annotations."haproxy.org/response-set-header" (1)
Strict-Transport-Security "max-age=31536000" X-Frame-Options "DENY" X-Content-Type-Options "nosniff" Referrer-Policy "strict-origin-when-cross-origin"
string
ingress.annotations."haproxy.org/ssl-redirect-port" (1)
443
string
ingress.annotations."nginx.ingress.kubernetes.io/enable-global-auth" (1)
false
string
ingress.annotations."nginx.ingress.kubernetes.io/proxy-body-size" (1)
8000m
string
ingress.className (2)
external
string
service.ssh.port (13)
22
number
service.ssh.type (13)
LoadBalancer
string
service.ssh.annotations."external-dns.alpha.kubernetes.io/hostname" (6)
git-ssh.18b.haus
string
service.ssh.annotations."io.cilium/lb-ipam-ips" (5)
${FORGEJO_ADDRESS}
string
service.ssh.annotations."lbipam.cilium.io/ips" (4)
${LB_FORGEJO}
string
service.ssh.annotations."metallb.io/loadBalancerIPs" (1)
${CLUSTER_EXTERNAL_SUBNET_PREFIX}.${CLUSTER_LB_FORGEJO}
string
service.ssh.externalTrafficPolicy (4)
Local
string
service.ssh.ipFamilyPolicy (3)
SingleStack
string
service.ssh.loadBalancerIP (3)
10.0.1.44
string
service.ssh.hostPort (2)
222
number
service.ssh.clusterIP (1)
2001:cafe:43::ef37
string
service.ssh.ipFamilies[] (1)
- IPv4
- IPv6
string
service.ssh.targetPort (1)
2222
number
service.http.port (7)
3000
number
service.http.extraPorts[].name (4)
anubis
string
service.http.extraPorts[].port (4)
8080
number
service.http.extraPorts[].targetPort (4)
anubis
string, number
service.http.type (1)
ClusterIP
string
service.app.ports.http.port (3)
80
number
service.app.ports.ssh.port (2)
22
number
service.annotations."prometheus.io/probe" (2)
true
string
service.annotations."prometheus.io/protocol" (2)
tcp
string
valkey-cluster.enabled (12)
false
boolean
httpRoute.enabled (9)
true
boolean
httpRoute.hostnames[] (9)
- git.${SECRET_DOMAIN_2}
string
httpRoute.parentRefs[].name (9)
envoy-internal
string
httpRoute.parentRefs[].namespace (9)
network
string
httpRoute.parentRefs[].sectionName (3)
https
string
httpRoute.parentRefs[].group (2)
gateway.networking.k8s.io
string
httpRoute.parentRefs[].kind (2)
Gateway
string
httpRoute.annotations."external-dns.alpha.kubernetes.io/cloudflare-proxied" (2)
false
string
httpRoute.annotations."external-dns.alpha.kubernetes.io/target" (2)
ingress.${SECRET_DOMAIN_2}
string
httpRoute.matches.timeouts.request (1)
300s
string
httpRoute.rules[].backendRefs[].name (1)
forgejo-http
string
httpRoute.rules[].backendRefs[].namespace (1)
development
string
httpRoute.rules[].backendRefs[].port (1)
anubis
string
image.rootless (9)
true
boolean
image.repository (7)
forgejo/forgejo
string
image.tag (7)
14.0.2
string
image.registry (6)
code.forgejo.org
string
image.digest (2)
sha256:d07a623ff4da1a78baab6f3ba0b3273268efd305c73cbc597e1ebe735b77e6b1
string
resources.limits.memory (9)
2Gi
string
resources.limits.cpu (3)
2000m
string
resources.requests.memory (9)
1Gi
string
resources.requests.cpu (7)
10m
string
redis-cluster.enabled (8)
false
boolean
podSecurityContext.fsGroup (7)
1000
number
podSecurityContext.runAsGroup (3)
1000
number
podSecurityContext.runAsUser (3)
1000
number
podSecurityContext.fsGroupChangePolicy (2)
OnRootMismatch
string
podSecurityContext.runAsNonRoot (1)
true
boolean
podSecurityContext.seccompProfile.type (1)
RuntimeDefault
string
extraVolumes[].name (6)
anubis-policies
string
extraVolumes[].configMap.name (4)
anubis-configmap
string
extraVolumes[].configMap.defaultMode (2)
600
number
extraVolumes[].secret.secretName (3)
forgejo-ssh-keys
string
extraVolumes[].secret.defaultMode (1)
600
number
extraVolumes[].secret.items[].key (1)
gitconfig
string
extraVolumes[].secret.items[].path (1)
.gitconfig
string
extraVolumes[].persistentVolumeClaim.claimName (1)
git
string
deployment.annotations."secret.reloader.stakater.com/reload" (5)
forgejo-secret
string
deployment.annotations."reloader.stakater.com/auto" (1)
true
string
deployment.env[].name (1)
PGSSLROOTCERT
PGSSLCERT
PGSSLKEY
SSH_AUTH_SOCK
string
deployment.env[].value (1)
/var/run/secrets/root-ca/ca.crt
/var/run/secrets/postgresql/tls.crt
/var/run/secrets/postgresql/tls.key
/tmp/ssh-tpm-agent.sock
string
deployment.terminationGracePeriodSeconds (1)
600
number
replicaCount (5)
1
number
containerSecurityContext.allowPrivilegeEscalation (4)
false
boolean
containerSecurityContext.capabilities.add[] (4)
- SYS_CHROOT
string
containerSecurityContext.capabilities.drop[] (1)
- ALL
string
containerSecurityContext.readOnlyRootFilesystem (4)
true
boolean
containerSecurityContext.runAsGroup (3)
1000
number
containerSecurityContext.runAsNonRoot (3)
true
boolean
containerSecurityContext.runAsUser (3)
1000
number
extraContainers[].env[].name (4)
BIND
DIFFICULTY
SERVE_ROBOTS_TXT
ED25519_PRIVATE_KEY_HEX
TARGET
string
extraContainers[].env[].value (4)
:8080
10
true
http://localhost:3000
string
extraContainers[].env[].valueFrom.secretKeyRef.key (3)
ED25519_PRIVATE_KEY
string
extraContainers[].env[].valueFrom.secretKeyRef.name (3)
anubis-secret
string
extraContainers[].image (4)
ghcr.io/techarohq/anubis:v1.25.0
string
extraContainers[].imagePullPolicy (4)
Always
string
extraContainers[].name (4)
anubis
string
extraContainers[].securityContext.allowPrivilegeEscalation (4)
false
boolean
extraContainers[].securityContext.capabilities.drop[] (4)
- ALL
string
extraContainers[].securityContext.runAsGroup (4)
1000
number
extraContainers[].securityContext.runAsNonRoot (4)
true
boolean
extraContainers[].securityContext.runAsUser (4)
1000
number
extraContainers[].securityContext.seccompProfile.type (4)
RuntimeDefault
string
extraContainers[].ports[].containerPort (3)
8080
number
extraContainers[].ports[].name (3)
anubis
string
extraContainers[].volumeMounts[].mountPath (3)
/etc/anubis/policies
string
extraContainers[].volumeMounts[].name (3)
anubis-policies
string
extraContainers[].volumeMounts[].readOnly (1)
true
boolean
extraContainers[].volumeMounts[].subPath (1)
anubisBotPolicy.json
string
extraContainers[].args[] (2)
- -policy-fname
- /etc/anubis/policies/botPolicies.yaml
string
extraContainers[].resources.limits.cpu (1)
750m
string
extraContainers[].resources.limits.memory (1)
384Mi
string
extraContainers[].resources.requests.cpu (1)
100m
string
extraContainers[].resources.requests.memory (1)
256Mi
string
memcached.enabled (4)
false
boolean
checkDeprecation (3)
true
boolean
defaultPodOptions.securityContext.fsGroup (3)
1000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (3)
OnRootMismatch
string
defaultPodOptions.securityContext.runAsGroup (3)
1000
number
defaultPodOptions.securityContext.runAsNonRoot (3)
true
boolean
defaultPodOptions.securityContext.runAsUser (3)
1000
number
defaultPodOptions.securityContext.seccompProfile.type (2)
RuntimeDefault
string
defaultPodOptions.automountServiceAccountToken (2)
false
boolean
defaultPodOptions.dnsConfig.options[].name (2)
ndots
string
defaultPodOptions.dnsConfig.options[].value (2)
1
string
defaultPodOptions.enableServiceLinks (2)
false
boolean
defaultPodOptions.labels."egress.cilium.io/auth" (2)
true
string
defaultPodOptions.labels."egress.cilium.io/smtp-relay" (2)
true
string
extraContainerVolumeMounts[].mountPath (3)
/ssh
string
extraContainerVolumeMounts[].name (3)
ssh-key
string
extraContainerVolumeMounts[].readOnly (2)
true
boolean
extraContainerVolumeMounts[].subPath (2)
ssh_host_ed25519_key
string
route.app.annotations."gatus.home-operations.com/endpoint" (3)
name: forgejo
string
route.app.hostnames[] (3)
- git.${ROOT_DOMAIN}
string
route.app.parentRefs[].name (3)
envoy-internal
string
route.app.parentRefs[].namespace (3)
network
string
route.app.rules[].backendRefs[].name (2)
forgejo
string
route.app.rules[].backendRefs[].port (2)
80
number
route.app.rules[].filters[].requestRedirect.path.replaceFullPath (2)
/user/oauth2/Pocket ID
string
route.app.rules[].filters[].requestRedirect.path.type (2)
ReplaceFullPath
string
route.app.rules[].filters[].requestRedirect.statusCode (2)
301
number
route.app.rules[].filters[].responseHeaderModifier.set[].name (2)
Content-Security-Policy
string
route.app.rules[].filters[].responseHeaderModifier.set[].value (2)
default-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';
string
route.app.rules[].filters[].type (2)
ResponseHeaderModifier
RequestRedirect
string
route.app.rules[].matches[].path.type (2)
PathPrefix
string
route.app.rules[].matches[].path.value (2)
/user/login
string
route.ssh.kind (2)
TCPRoute
string
route.ssh.parentRefs[].name (2)
envoy-internal
string
route.ssh.parentRefs[].namespace (2)
network
string
route.ssh.parentRefs[].sectionName (2)
ssh
string
route.ssh.rules[].backendRefs[].name (2)
forgejo
string
route.ssh.rules[].backendRefs[].port (2)
22
number
test.enabled (3)
true
boolean
test.image.name (3)
busybox
string
test.image.tag (3)
latest
string
controllers.main.containers.app.env.FORGEJO__mailer__FROM (2)
${CLUSTER_NAME}@${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__mailer__SMTP_ADDR (2)
smtp-relay.network.svc.cluster.local
string
controllers.main.containers.app.env.FORGEJO__mailer__SMTP_PORT (2)
25
string
controllers.main.containers.app.env.FORGEJO__openid__WHITELISTED_URIS (2)
id.${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__server__DOMAIN (2)
git.${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__server__HTTP_PORT (2)
80
number
controllers.main.containers.app.env.FORGEJO__server__ROOT_URL (2)
https://git.${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__server__SSH_DOMAIN (2)
git.${ROOT_DOMAIN}
string
controllers.main.containers.app.env.FORGEJO__server__SSH_PORT (2)
22
number
controllers.main.containers.app.env.FORGEJO__time__DEFAULT_UI_LOCATION (2)
Europe/Warsaw
string
controllers.main.containers.app.env.TZ (2)
Europe/Warsaw
string
controllers.main.containers.app.envFrom[].secretRef.name (2)
forgejo-secret
string
controllers.main.containers.app.image.repository (2)
codeberg.org/forgejo/forgejo
string
controllers.main.containers.app.image.tag (2)
14.0.3-rootless@sha256:3bde16a366e57f37c09599b77ceb83ed05b1934f8224072f8140bc66cf243608
string
controllers.main.containers.app.probes.liveness.enabled (2)
true
boolean
controllers.main.containers.app.probes.liveness.spec.failureThreshold (2)
5
number
controllers.main.containers.app.probes.liveness.spec.periodSeconds (2)
30
number
controllers.main.containers.app.probes.liveness.spec.timeoutSeconds (2)
5
number
controllers.main.containers.app.probes.readiness.custom (2)
true
boolean
controllers.main.containers.app.probes.readiness.enabled (2)
true
boolean
controllers.main.containers.app.probes.readiness.spec.failureThreshold (2)
5
number
controllers.main.containers.app.probes.readiness.spec.httpGet.path (2)
/api/healthz
string
controllers.main.containers.app.probes.readiness.spec.httpGet.port (2)
80
number
controllers.main.containers.app.probes.readiness.spec.periodSeconds (2)
10
number
controllers.main.containers.app.probes.readiness.spec.timeoutSeconds (2)
5
number
controllers.main.containers.app.probes.startup.enabled (2)
true
boolean
controllers.main.containers.app.probes.startup.spec.failureThreshold (2)
30
number
controllers.main.containers.app.probes.startup.spec.periodSeconds (2)
10
number
controllers.main.containers.app.resources.limits.memory (2)
2048Mi
string
controllers.main.containers.app.resources.requests.cpu (2)
10m
string
controllers.main.containers.app.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.main.containers.app.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.main.containers.app.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.main.initContainers.01-set-config.command[] (2)
- /bin/sh
- -c
- mkdir -p /var/lib/gitea/custom/conf cp /config/app.ini /var/lib/gitea/custom/conf/app.ini
string
controllers.main.initContainers.01-set-config.image.repository (2)
ghcr.io/home-operations/busybox
string
controllers.main.initContainers.01-set-config.image.tag (2)
1.37.0@sha256:026ed7273270ec08f6902b4ae8334c23b473e5394bec3bbbdbfe580c710d50bc
string
controllers.main.initContainers.01-set-config.resources.requests.cpu (2)
5m
string
controllers.main.initContainers.01-set-config.resources.requests.memory (2)
10M
string
controllers.main.initContainers.01-set-config.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.main.initContainers.01-set-config.securityContext.capabilities.drop[] (2)
- ALL
string
controllers.main.initContainers.01-set-config.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.forgejo.annotations."reloader.stakater.com/auto" (1)
true
string
controllers.forgejo.containers.app.env.TZ (1)
${TIMEZONE}
string
controllers.forgejo.containers.app.env.USER_GID (1)
1000
number
controllers.forgejo.containers.app.env.USER_UID (1)
1000
number
controllers.forgejo.containers.app.envFrom[].secretRef.name (1)
forgejo-secret
string
controllers.forgejo.containers.app.image.pullPolicy (1)
IfNotPresent
string
controllers.forgejo.containers.app.image.repository (1)
codeberg.org/forgejo/forgejo
string
controllers.forgejo.containers.app.image.tag (1)
14.0.3-rootless@sha256:3bde16a366e57f37c09599b77ceb83ed05b1934f8224072f8140bc66cf243608
string
controllers.forgejo.initContainers.init-db.envFrom[].secretRef.name (1)
forgejo-secret
string
controllers.forgejo.initContainers.init-db.image.repository (1)
ghcr.io/home-operations/postgres-init
string
controllers.forgejo.initContainers.init-db.image.tag (1)
18.3.0@sha256:6fa1f331cddd2eb0b6afa7b8d3685c864127a81ab01c3d9400bc3ff5263a51cf
string
nameOverride (2)
forgejo
string
serviceAccount.create (2)
true
boolean
valkey.enabled (2)
false
boolean
extraInitVolumeMounts[].mountPath (1)
/var/run/secrets/postgresql
/var/run/secrets/root-ca
string
extraInitVolumeMounts[].name (1)
postgres-forgejo
root-ca
string
global.hostAliases[].hostnames[] (1)
- ${GITLAB_MIRROR_HOST:=gitlab-proxy}
string
global.hostAliases[].ip (1)
192.168.69.127
string
global.priorityClassName (1)
cluster-low
string
livenessProbe.enabled (1)
true
boolean
livenessProbe.failureThreshold (1)
5
number
livenessProbe.initialDelaySeconds (1)
300
number
livenessProbe.periodSeconds (1)
30
number
livenessProbe.successThreshold (1)
1
number
livenessProbe.timeoutSeconds (1)
10
number
metrics.enabled (1)
true
boolean
metrics.serviceMonitor.enabled (1)
true
boolean
podAnnotations."reloader.stakater.com/auto" (1)
true
string
readinessProbe.enabled (1)
true
boolean
readinessProbe.failureThreshold (1)
5
number
readinessProbe.initialDelaySeconds (1)
60
number
readinessProbe.periodSeconds (1)
20
number
readinessProbe.successThreshold (1)
1
number
readinessProbe.timeoutSeconds (1)
10
number
startupProbe.enabled (1)
true
boolean
startupProbe.failureThreshold (1)
30
number
startupProbe.initialDelaySeconds (1)
60
number
startupProbe.periodSeconds (1)
10
number
startupProbe.successThreshold (1)
1
number
startupProbe.timeoutSeconds (1)
5
number