wiki-grav/pages/02.linux/gitea/default.en.md

---
title: Gitea
visible: true
---

[toc]

## Pre-Setup

Create a gitea user  
`# useradd -m git`

`# mkdir /etc/gitea`  
`# chown git:git -R /etc/gitea`

Create the .ssh directory for the git user  
`$ sudo -u git mkdir -p /home/git/.ssh`

Get the user id of git with `id git`

## Podman

### Network and Pod

`# podman network create net_gitea`  
`# podman pod create --name pod_gitea --network net_gitea -p 127.0.0.1:5432:5432 -p 3000:3000 -p 127.0.0.1:2222:22`

#### Port Mappings

```
5432 (localhost): Postgres Database
3000: Gitea WebUI
2222 (localhost): Gitea SSH
```

### Database

```sh
# podman run --name giteadb \
    -e PGDATA=/var/lib/postgresql/data/pgdata \
    -e POSTGRES_USER=gitea \
    -e POSTGRES_PASSWORD=gitea \
    -e POSTGRES_DB=gitea \
    -v /mnt/postgres:/var/lib/postgresql/data \
    --pod pod_gitea \
    -d docker.io/postgres:14
```

### Application

```sh
# podman run --name gitea \
    -e USER_UID=(uid) \
    -e USER_GID=(gid) \
    -e GITEA__database__DB_TYPE=postgres \
    -e GITEA__database__HOST=giteadb:5432 \
    -e GITEA__database__NAME=gitea \
    -e GITEA__database__USER=gitea \
    -e GITEA__database__PASSWD=gitea \
    -v /mnt/gitea:/data \
    -v /home/git/.ssh/:/data/git/.ssh \
    -v /etc/timezone:/etc/timezone:ro \
    -v /etc/localtime:/etc/localtime:ro \
    --pod pod_gitea \
    -d docker.io/gitea/gitea:latest
```

**NOTE:** gitea's /data directory must not contain permissions too open. Otherwise the SSH redirection set up below will fail.  
`0750` for directories and `0640` has been shown to work

The next few lines are used to set up ssh-redirection to gitea if it is used to clone a repo.

> See also the [official documentation](https://docs.gitea.io/en-us/install-with-docker/#sshing-shim-with-authorized_keys)

Create SSH Keys for gitea  
`$ sudo -u git ssh-keygen -t rsa -b 4096 -C "Gitea Host Key"`  
`$ sudo -u git cat /home/git/.ssh/id_rsa.pub | sudo -u git tee -a /home/git/.ssh/authorized_keys`  
`$ sudo -u git chmod 600 /home/git/.ssh/authorized_keys`

```sh
$ cat <<"EOF" | sudo tee /usr/local/bin/gitea
#!/bin/sh
ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.1 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"
EOF
```

`# chmod +x /usr/local/bin/gitea`

We've now finished setting up the ssh-redirection.  
After that, connect to the Server on port 3000 to finish the installation  
The first registered user will be made admin

## Management CLI

Gitea comes with a management cli. To access it, change into the Container first and su into the user "git".  
`# podman exec -it gitea bash`  
`# su git`

### User Management

List users:  
`$ gitea admin user list`

Change user password:  
`$ gitea admin user change-password -u (user) -p (password)`