gitea

gitea 구성
Tags:
Categories:

image

  graph LR
  subgraph gvp6nx1a
  A <-- proxy --> C1[nginx]
  B1[ssh-key] -- ssh-keygen --> A[gitea]
  B2[gpg-key] -- gpg --> A
  end
  C[client] <-- ssh --> A
  C1 <-- https --> C

container 구성

docker-compose.yml

vi /opt/gitea/docker-compose.yml

services:
  gitea:
    image: gitea/gitea:latest
    container_name: gitea
    networks:
      - dev
    ports:
      - 61257:22/tcp
      - 3000/tcp
    user: 0:0
    environment:
      - USER_UID=1000
      - USER_GID=1000
    volumes:
      - /opt/gitea/data:/data:rw
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    restart: unless-stopped
networks:
  dev:
    external: true

key

gitea 전용의 ssh와 gpg키를 github 구성과 동일하게 생성

image

eval "$(ssh-agent -s)" && \
ssh-add ~/.ssh/git@gvp6nx1a.pem && \
ssh -vT ssh://git@localhost:6**** && \
ssh -p 6**** -i "/home/dev/.ssh/git@gvp6nx1a.pem" git@localhost

Hi there, dev! You've successfully authenticated with the key named gitea-eddsa-key-20240625, but Gitea does not provide shell access.

app.ini

vi /opt/gitea/data/gitea/conf/app.ini

[server]
APP_DATA_PATH = /data/gitea
DOMAIN = localhost
SSH_DOMAIN = gvp6nx1a.duckdns.org
HTTP_PORT = 3000
ROOT_URL = https://gi.gvp6nx1a.duckdns.org
DISABLE_SSH = false
SSH_PORT = 6****
SSH_LISTEN_PORT = 6****
LFS_START_SERVER = true
LFS_JWT_SECRET = S******************************************
OFFLINE_MODE = false
...
[security]
...
REVERSE_PROXY_LIMIT = 1
REVERSE_PROXY_TRUSTED_PROXIES = *
...
OptionsRemarks
SSH_LISTEN_PORTPort for the built-in SSH server
SSH_PORTSSH port displayed in clone URL (endpoint 주소)
REVERSE_PROXY_LIMITproxy에서 real ip 노출 여부

References