gitops-zurrli/argoapps/zurrli/forgejo.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: forgejo
  namespace: argocd
  finalizers:
    - resources-finalizer.argocd.argoproj.io
spec:
  project: apps
  sources:
    - chart: forgejo-contrib/forgejo
      repoURL: codeberg.org
      targetRevision: 6.0.5
      helm:
        values: |
          gitea:
            additionalConfigSources:
              - secret:
                  secretName: forgejo-mailer
            admin:
              existingSecret: forgejo-admin-secret
            config:
              APP_NAME: tbrnt Forge
              admin:
                DEFAULT_EMAIL_NOTIFICATIONS: enabled
              database:
                DB_TYPE: postgres
              session:
                PROVIDER: db
              cache:
                ADAPTER: memory
              queue:
                TYPE: level
              indexer:
                ISSUE_INDEXER_TYPE: bleve
                REPO_INDEXER_ENABLED: true
              service:
                DISABLE_REGISTRATION: true
              actions:
                ENABLED: true
                DEFAULT_ACTIONS_URL: https://code.forgejo.org
              server:
                DOMAIN: git.tbrnt.ch
                SSH_PORT: 29418
                SSH_LISTEN_PORT: 29418
                SSH_SERVER_HOST_KEYS: ssh/ssh_host_ed25519_key, ssh/ssh_host_ecdsa_key, ssh/ssh_host_rsa_key
                LANDING_PAGE: explore
              security:
                REVERSE_PROXY_LIMIT: 1
                REVERSE_PROXY_TRUSTED_PROXIES: 10.0.0.0/8

          ingress:
            enabled: true
            annotations:
              cert-manager.io/cluster-issuer: letsencrypt-prod-desec
              traefik.ingress.kubernetes.io/router.middlewares: kube-system-redirect-https@kubernetescrd
            hosts:
            - host: git.tbrnt.ch
              paths:
              - path: /
                pathType: Prefix
            tls:
            - secretName: ingress-cert
              hosts:
              - git.tbrnt.ch

          strategy:
            type: Recreate
          redis-cluster:
            enabled: false
          postgresql:
            enabled: true
            persistence:
              enabled: true
              storageClass: local-path
          postgresql-ha:
            enabled: false

          persistence:
            enabled: true
            storageClass: local-path
    - path: apps/zurrli/forgejo
      repoURL: https://git.tbrnt.ch/tobru/gitops-zurrli.git
      targetRevision: HEAD
  destination:
    namespace: forgejo
    server: https://kubernetes.default.svc
  syncPolicy:
    syncOptions:
      - CreateNamespace=true
    automated:
      prune: true