gitea config

gitea/files/app_ini.jinja

@@ -0,0 +1,36 @@
+# Managed by salt
+{% import_yaml 'gitea/app_defaults.yaml' as defaults -%}
+{% set secrets = salt.file.read(pillar['gitea']['path'] + '/etc/secrets.json') | load_json -%}
+{% set pillar_global = salt.pillar.get('gitea:config:global', {}) -%}
+{% set pillar_sections = salt.pillar.get('gitea:config:sections', {}) -%}
+
+{% for key in defaults['global'].keys() -%}
+{%   if key in pillar_global -%}
+{{key}} = {{pillar_global[key]}}
+{%   else -%}
+{{key}} = {{defaults['global'][key]}}
+{%   endif -%}
+{% endfor %}
+
+[security]
+INTERNAL_TOKEN = {{secrets['INTERNAL_TOKEN']}}
+INSTALL_LOCK = true
+SECRET_KEY = {{secrets['SECRET_KEY']}}
+
+{% for section in defaults['sections'].keys() -%}
+[{{section}}]
+{%   if section == 'server' -%}
+LFS_JWT_SECRET = {{secrets['LFS_JWT_SECRET']}}
+{%   elif section == 'database' -%}
+NAME = {{pillar_sections['database']['NAME']}}
+USER = {{pillar_sections['database']['USER']}}
+PASSWD = `{{pillar_sections['database']['PASSWD']}}`
+{%   endif -%}
+{%   for key in defaults['sections'][section] -%}
+{%     if section in pillar_sections and key in pillar_sections[section] -%}
+{{key}} = {{pillar_sections[section][key]}}
+{%     else -%}
+{{key}} = {{defaults['sections'][section][key]}}
+{%     endif -%}
+{%   endfor -%}
+{% endfor %}

gitea/files/secrets_json.jinja

@@ -0,0 +1,5 @@
+{{ {
+    'INTERNAL_TOKEN': salt.cmd.run(pillar['gitea']['path'] + '/bin/gitea generate secret INTERNAL_TOKEN'),
+    'LFS_JWT_SECRET': salt.cmd.run(pillar['gitea']['path'] + '/bin/gitea generate secret LFS_JWT_SECRET'),
+    'SECRET_KEY': salt.cmd.run(pillar['gitea']['path'] + '/bin/gitea generate secret SECRET_KEY')
+} | tojson }}