From 9b55caf58f8cae974b076b119e7323bb7da1823b Mon Sep 17 00:00:00 2001
From: Matthias Hinrichs <matthias.hinrichs@me.com>
Date: Sun, 10 May 2026 22:55:56 +0200
Subject: [PATCH] forgejo_settings

---
 .../homelab-apps/templates/forgejo.yaml       | 148 +++++++++---------
 1 file changed, 74 insertions(+), 74 deletions(-)

diff --git a/09_homelab_apps/homelab-apps/templates/forgejo.yaml b/09_homelab_apps/homelab-apps/templates/forgejo.yaml
index 1232b04..da03705 100644
--- a/09_homelab_apps/homelab-apps/templates/forgejo.yaml
+++ b/09_homelab_apps/homelab-apps/templates/forgejo.yaml
@@ -8,80 +8,80 @@ spec:
     namespace: forgejo
     server: {{ $.Values.spec.destination.server }}
   project: homelab
-  source:
-    path: .
-    repoURL: oci://code.forgejo.org/forgejo-helm/forgejo
-    targetRevision: 17.0.1
-    helm:
-        values: |
-          gitea:
-            admin:
-              username: 'mh-admin'
-              password: 'start123'
-              email: 'matthias@hnrx.de'
-            oauth:
-              - name: 'Authentik'
-                provider: 'openidConnect'
-                key: 'SFcyq6DYywWMcG2VxFjC6bAcsC5BSHmlUaDIvSan'
-                secret: 'AZNCzbYDFExH8EUIBUOtRqv3MClA83N87TzQKJ2sAmNNdwbrU0pKVXJq4cOkxWugoG7AnizcAdlzl4n5FicIUWxPUvRRhkRchRqRoiimLg20KNqRjmll2SUoPsE0RhxK'
-                autoDiscoverUrl: 'https://auth.hnrx.net/application/o/githnrxnet/.well-known/openid-configuration'
-            config:
-              actions:
-                ENABLED: true
-                LOG_RETENTION_DAYS: 365
-                ARTIFACT_RETENTION_DAYS: 90
-              api:
-                MAX_RESPONSE_ITEMS: 100
-              mailer:
-                ENABLED: true
-                SMTP_ADDR: 'smtp.gmail.com'
-                SMTP_PORT: "465"
-                FROM: 'matthias.hinrichs@gmail.com'
-                USER: 'matthias.hinrichs'
-                PASSWD: "kuid ogzo mnej hbvj"
-                PROTOCOL: smtps
-              migrations:
-                ALLOWED_DOMAINS: "*.hnrx.net"
-                ALLOW_LOCALNETWORKS: true
-              openid:
-                ENABLE_OPENID_SIGNIN: false
-              database:
-                DB_TYPE: postgres
-                HOST: postgresql-test1-pgbouncer.everest-db.svc:5432
-                NAME: postgres
-                USER: postgres
-                PASSWD: 3yZ64SU8sLqS-MijJh.aPJ59
-                SSL_MODE: require
-              picture:
-                GRAVATAR_SOURCE: gravatar
-              server:
-                LANDING_PAGE: explore
-                OFFLINE_MODE: false
-              service:
-                ENABLE_NOTIFY_MAIL: true
-              service.explore:
-                DISABLE_USERS_PAGE: true
-                DISABLE_ORGANIZATIONS_PAGE: true
-              webhook:
-                ALLOWED_HOST_LIST: "*.hnrx.net"
-                SKIP_TLS_VERIFY: true
-                DELIVER_TIMEOUT: 30
-
-          postgresql:
-            enabled: false
-          persistence:
-            enabled: true
-            storageClass: nfs-csi
-            existingClaim: gitea-shared-storage
-          
-
-          httpRoute:
-            enabled: true
-            hostnames:
-              - forgejo.k8s.hnrx.net
-            parentRefs:
-              - name: shared-gateway
-                namespace: default
+  sources:
+    - path: .
+      repoURL: oci://code.forgejo.org/forgejo-helm/forgejo
+      targetRevision: 17.0.1
+      helm:
+          values: |
+            gitea:
+              admin:
+                username: 'mh-admin'
+                password: 'start123'
+                email: 'matthias@hnrx.de'
+              oauth:
+                - name: 'Authentik'
+                  provider: 'openidConnect'
+                  key: 'SFcyq6DYywWMcG2VxFjC6bAcsC5BSHmlUaDIvSan'
+                  secret: 'AZNCzbYDFExH8EUIBUOtRqv3MClA83N87TzQKJ2sAmNNdwbrU0pKVXJq4cOkxWugoG7AnizcAdlzl4n5FicIUWxPUvRRhkRchRqRoiimLg20KNqRjmll2SUoPsE0RhxK'
+                  autoDiscoverUrl: 'https://auth.hnrx.net/application/o/githnrxnet/.well-known/openid-configuration'
+              config:
+                actions:
+                  ENABLED: true
+                  LOG_RETENTION_DAYS: 365
+                  ARTIFACT_RETENTION_DAYS: 90
+                api:
+                  MAX_RESPONSE_ITEMS: 100
+                mailer:
+                  ENABLED: true
+                  SMTP_ADDR: 'smtp.gmail.com'
+                  SMTP_PORT: "465"
+                  FROM: 'matthias.hinrichs@gmail.com'
+                  USER: 'matthias.hinrichs'
+                  PASSWD: "kuid ogzo mnej hbvj"
+                  PROTOCOL: smtps
+                migrations:
+                  ALLOWED_DOMAINS: "*.hnrx.net"
+                  ALLOW_LOCALNETWORKS: true
+                openid:
+                  ENABLE_OPENID_SIGNIN: false
+                database:
+                  DB_TYPE: postgres
+                  HOST: postgresql-test1-pgbouncer.everest-db.svc:5432
+                  NAME: postgres
+                  USER: postgres
+                  PASSWD: 3yZ64SU8sLqS-MijJh.aPJ59
+                  SSL_MODE: require
+                picture:
+                  GRAVATAR_SOURCE: gravatar
+                server:
+                  LANDING_PAGE: explore
+                  OFFLINE_MODE: false
+                service:
+                  ENABLE_NOTIFY_MAIL: true
+                service.explore:
+                  DISABLE_USERS_PAGE: true
+                  DISABLE_ORGANIZATIONS_PAGE: true
+                webhook:
+                  ALLOWED_HOST_LIST: "*.hnrx.net"
+                  SKIP_TLS_VERIFY: true
+                  DELIVER_TIMEOUT: 30
+  
+            postgresql:
+              enabled: false
+            persistence:
+              enabled: true
+              storageClass: nfs-csi
+              existingClaim: gitea-shared-storage
+            
+  
+            httpRoute:
+              enabled: true
+              hostnames:
+                - forgejo.k8s.hnrx.net
+              parentRefs:
+                - name: shared-gateway
+                  namespace: default
   syncPolicy:
     automated: 
       selfHeal: true