wiki-grav/pages/02.linux/gitea/default.en.md

title	visible
Gitea	true

[toc]

Pre-Setup

Create a gitea user
# useradd -m git

# mkdir /etc/gitea
# chown git:git -R /etc/gitea

Create the .ssh directory for the git user
$ sudo -u git mkdir -p /home/git/.ssh

Get the user id of git with id git

Podman

Network and Pod

# podman network create net_gitea
# podman pod create --name pod_gitea --network net_gitea -p 127.0.0.1:5432:5432 -p 3000:3000 -p 127.0.0.1:2222:22

Port Mappings

5432 (localhost): Postgres Database
3000: Gitea WebUI
2222 (localhost): Gitea SSH

Database

# podman run --name giteadb \
    -e PGDATA=/var/lib/postgresql/data/pgdata \
    -e POSTGRES_USER=gitea \
    -e POSTGRES_PASSWORD=gitea \
    -e POSTGRES_DB=gitea \
    -v /mnt/postgres:/var/lib/postgresql/data \
    --pod pod_gitea \
    -d docker.io/postgres:14

Application

# podman run --name gitea \
    -e USER_UID=(uid) \
    -e USER_GID=(gid) \
    -e GITEA__database__DB_TYPE=postgres \
    -e GITEA__database__HOST=giteadb:5432 \
    -e GITEA__database__NAME=gitea \
    -e GITEA__database__USER=gitea \
    -e GITEA__database__PASSWD=gitea \
    -v /mnt/gitea:/data \
    -v /home/git/.ssh/:/data/git/.ssh \
    -v /etc/timezone:/etc/timezone:ro \
    -v /etc/localtime:/etc/localtime:ro \
    --pod pod_gitea \
    -d docker.io/gitea/gitea:latest

NOTE: gitea's /data directory must not contain permissions too open. Otherwise the SSH redirection set up below will fail.
0750 for directories and 0640 has been shown to work

The next few lines are used to set up ssh-redirection to gitea if it is used to clone a repo.

See also the official documentation

Create SSH Keys for gitea
$ sudo -u git ssh-keygen -t rsa -b 4096 -C "Gitea Host Key"
$ sudo -u git cat /home/git/.ssh/id_rsa.pub | sudo -u git tee -a /home/git/.ssh/authorized_keys
$ sudo -u git chmod 600 /home/git/.ssh/authorized_keys

$ cat <<"EOF" | sudo tee /usr/local/bin/gitea
#!/bin/sh
ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.1 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"
EOF

# chmod +x /usr/local/bin/gitea

We've now finished setting up the ssh-redirection.
After that, connect to the Server on port 3000 to finish the installation
The first registered user will be made admin

Management CLI

Gitea comes with a management cli. To access it, change into the Container first and su into the user "git".
# podman exec -it gitea bash
# su git

User Management

List users:
$ gitea admin user list

Change user password:
$ gitea admin user change-password -u (user) -p (password)