Gitea

Prerequisites

This guide assumes you have the following prerequisites in place:

• Longhorn
• Authelia
• Zalando Postgres Operator

Gitea

Gitea is a self-hosted Git service that provides a simple and efficient way to manage your Git repositories. It is a lightweight and easy-to-use alternative to other Git hosting services.

Installation

1. Create the following directory structure for Gitea:

    gitea/
    ├── gitea.yml
    ├── gitea-db.yml
    ├── gitea-db-secret.yml
    ├── gitea-ingress.yml
    ├── gitea-ingress-route.yml
    ├── gitea-pvc.yml
    └── gitea-svc.yml

2. Add the following content to gitea/gitea.yml:

   ---
   apiVersion: apps/v1
   kind: Deployment
   metadata:
     name: gitea-app
     namespace: git-ops
   spec:
     strategy:
       type: Recreate
     replicas: 1
     selector:
       matchLabels:
         app: gitea-app
     template:
       metadata:
         labels:
           app: gitea-app
       spec:
         containers:
         - name: gitea
           image: gitea/gitea:1.25.4
           readinessProbe:
             exec:
               command:
               - sh
               - -c
               - |
                 nc -z gitea-db-cluster.git-ops.svc.cluster.local 5432
             initialDelaySeconds: 5
             periodSeconds: 5
             failureThreshold: 3
           ports:
           - containerPort: 22
             name: ssh
           - containerPort: 3000
             name: http
           env:
           - name: USER_UID
             value: "1000"
           - name: USER_GID
             value: "1000"
           - name: GITEA__database__DB_TYPE
             value: "postgres"
           - name: GITEA__database__HOST
             value: "gitea-db-cluster.git-ops.svc.cluster.local:5432"
           - name: GITEA__database__NAME
             value: "gitea"
           - name: GITEA__database__USER
             value: "gitea"
           - name: GITEA__database__PASSWD
             valueFrom:
               secretKeyRef:
                 name: gitea.gitea-db-cluster.credentials.postgresql.acid.zalan.do
                 key: password
           volumeMounts:
           - name: gitea-data
             mountPath: /data
           - name: localtime
             mountPath: /etc/localtime
         volumes:
         - name: localtime
           hostPath:
             path: /etc/localtime
             type: File
         - name: gitea-data
           persistentVolumeClaim:
             claimName: gitea-app-longhorn

3. Add the following content to gitea/gitea-db.yml:

   ---
   kind: "postgresql"
   apiVersion: "acid.zalan.do/v1"
   
   metadata:
     name: "gitea-db-cluster"
     namespace: "git-ops"
     labels:
       team: acid
   
   spec:
     teamId: "acid"
     postgresql:
       version: "17"
     numberOfInstances: 2
     volume:
       size: "3Gi"
       storageClass: "longhorn"
     users:
       gitea: []
     databases:
       gitea: gitea

4. Add the following content to gitea/gitea-ingress.yml:

   ---
   apiVersion: networking.k8s.io/v1
   kind: Ingress
   metadata:
     name: gitea-ingress
     namespace: git-ops
     annotations:
       cert-manager.io/cluster-issuer: letsencrypt-cloudflare 
       traefik.ingress.kubernetes.io/router.entrypoints: websecure
   spec:
     ingressClassName: traefik
     tls:
     - hosts:
       - gitea.example.com
       secretName: gitea-tls
     rules:
     - host: gitea.example.com
       http:
         paths:
         - path: /
           pathType: Prefix
           backend:
             service:
               name: gitea-int-service
               port:
                 number: 3000

5. Add the following content to gitea/gitea-ingress-route.yml:

   ---
   apiVersion: traefik.io/v1alpha1
   kind: IngressRouteTCP
   metadata:
     name: gitea-ssh
     namespace: git-ops
   spec:
     entryPoints:
       - ssh
     routes:
       - match: HostSNI(`*`)
         services:
           - name: gitea-int-service
             port: 22

6. Add the following content to gitea/gitea-pvc.yml:

   ---
   apiVersion: v1
   kind: PersistentVolumeClaim
   metadata:
     name: gitea-app-longhorn
     namespace: git-ops
   spec:
     accessModes:
       - ReadWriteOnce
     volumeMode: Filesystem
     resources:
       requests:
         storage: 2Gi
     storageClassName: longhorn

7. Add the following content to gitea/gitea-svc.yml:

   ---
   apiVersion: v1
   kind: Service
   metadata:
     name: gitea-int-service
     namespace: git-ops
   spec:
     selector:
       app: gitea-app
     ports:
       - protocol: TCP
         port: 3000
         targetPort: 3000
         name: http
       - protocol: TCP
         port: 22
         targetPort: 22
         name: ssh
   
   ---
   apiVersion: v1
   kind: Service
   metadata:
     name: gitea-db
     namespace: git-ops
   spec:
     ports:
       - port: 5432
         targetPort: 5432
     selector:
       app: gitea-db
     clusterIP: None

8. Commit and push the files to your Git repository. Flux will automatically deploy Gitea to your cluster.