FSFE Git Service
This Ansible playbook takes care of setting up the FSFE's Git Service, currently based on Gitea. Some sensitive bits are encrypted.
- Base setup of host
- MySQL database for gitea
- Gitea configuration
- Webserver (nginx) including some rate limits
Prerequisites
The machine should be connected via innernet in order to authenticate users via LDAP. This is not part of this playbook.
Updates and configuration
Use this playbook to update the configuration of all elements described above. There is one exception though:
Upgrading Gitea
Before upgrading
- make a snapshot of
davyin Proxmox - schedule downtime in the monitoring system
- announce the possible downtime on team@lists.fsfe.org
Upgrading
To upgrade Gitea itself (in binary form), use /root/bin/gitea-upgrade.sh
providing the desired version as the first argument. For example:
/root/bin/gitea-upgrade.sh 1.13.7
This takes care of downloading the binary, checking the hashsum, replacing the binary, and reminding you of restarting the service.
After updating
After major upgrades
compare the upstream templates
for this release with the ones stored inroles/gitea/files/custom/templates.
If the changes are substantial migrate the custom changes. Then you have
to rerun the playbook (ansible-playbook playbook -t gitea) and restart gitea
to put these into effect.
After the procedure has been complete reply to the email that you sent beforehand informing the team that the maintenance work is done.