feat:Fix the bootstrap to be deploy key application

2026-08-18 15:08:03 -07:00
parent eac3a2a227
commit 54fa540b33
37 changed files with 1216 additions and 1202 deletions
@@ -0,0 +1,86 @@
+# Forgejo Helm Values — Single Source of Truth
+# Chart: https://codeberg.org/forgejo-contrib/forgejo-helm
+
+gitea:
+  admin:
+    username: "admin"
+    email: "[email protected]"
+    # Password set via secret (not in values)
+
+  config:
+    server:
+      DOMAIN: forgejo.riotpiao.com
+      ROOT_URL: https://forgejo.riotpiao.com
+      SSH_DOMAIN: forgejo.riotpiao.com
+      SSH_PORT: 22
+      
+    database:
+      DB_TYPE: postgres
+      HOST: forgejo-db-rw.forgejo.svc.cluster.local:5432
+      NAME: forgejo
+      # User/password from CNPG-generated secret
+      USER:
+        valueFrom:
+          secretKeyRef:
+            name: forgejo-db-app
+            key: username
+      PASSWD:
+        valueFrom:
+          secretKeyRef:
+            name: forgejo-db-app
+            key: password
+      
+    cache:
+      ADAPTER: redis
+      HOST: redis://forgejo-redis.forgejo.svc.cluster.local:6379/0
+      
+    session:
+      PROVIDER: redis
+      PROVIDER_CONFIG: redis://forgejo-redis.forgejo.svc.cluster.local:6379/1
+      
+    queue:
+      TYPE: redis
+      CONN_STR: redis://forgejo-redis.forgejo.svc.cluster.local:6379/2
+
+# Persistence (shared storage for repos)
+persistence:
+  enabled: true
+  storageClass: longhorn
+  size: 20Gi
+  accessModes:
+    - ReadWriteOnce
+
+# Ingress
+ingress:
+  enabled: true
+  className: nginx
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+  hosts:
+    - host: forgejo.riotpiao.com
+      paths:
+        - path: /
+          pathType: Prefix
+  tls:
+    - secretName: forgejo-tls
+      hosts:
+        - forgejo.riotpiao.com
+
+# Resources
+resources:
+  requests:
+    cpu: 200m
+    memory: 512Mi
+  limits:
+    cpu: 1000m
+    memory: 2Gi
+
+# Tolerations for control-plane
+tolerations:
+  - key: node-role.kubernetes.io/control-plane
+    operator: Exists
+    effect: NoSchedule
+
+# ArgoCD adoption labels
+labels:
+  argocd.argoproj.io/instance: forgejo