init

ansible/roles/gitea/handlers/main.yaml

@@ -0,0 +1,5 @@
+- name: Restart gitea
+  service:
+    name: gitea
+    state: restarted
+

ansible/roles/gitea/tasks/main.yaml

@@ -0,0 +1,86 @@
+- name: Download gitea
+  get_url:
+    url: https://dl.gitea.com/gitea/{{ gitea_version }}/gitea-{{ gitea_version }}-linux-amd64
+    dest: /usr/local/bin/gitea
+    mode: 0755
+
+- name: Create a git group
+  group:
+    name: git
+    state: present
+    gid: 1050 
+
+- name: Create a git user
+  user:
+    name: git
+    uid: 1050
+    group: 1050
+    comment: "git user"
+    shell: /bin/bash
+    state: present
+    create_home: yes
+
+- name: Create gitea data and logging directories
+  file:
+    path: "{{ item }}"
+    state: directory
+    mode: 0750
+    owner: git
+    group: git
+  loop:
+    - /var/lib/gitea
+    - /var/lib/gitea/custom
+    - /var/lib/gitea/log
+    - /var/lib/gitea/data
+
+- name: Create gitea config directory
+  file:
+    path: "/etc/gitea"
+    state: directory
+    mode: 0770
+    owner: root
+    group: git
+
+- name: Install gitea service
+  template:
+    src: templates/gitea.service.j2
+    dest: /etc/systemd/system/gitea.service
+    owner: root
+    group: root
+    mode: 0640
+  register: gitea_service
+  notify: Restart gitea
+    
+- name: systemctl daemon-reload to pickup gitea service changes
+  systemd_service:
+    daemon_reload: true
+  when: gitea_service.changed
+  notify: Restart gitea
+
+- name: Check if gitea web installer wrote its config
+  stat:
+    path: /etc/gitea/app.ini"
+  register: gitea_config_check
+
+- name: Start and enable gitea
+  service:
+    name: gitea
+    state: started
+    enabled: true
+
+- name: Update gitea config directory permissions post install
+  file:
+    path: "/etc/gitea"
+    state: directory
+    mode: 0750
+    owner: root
+    group: git
+  when: gitea_config_check.stat.exists
+
+- name: Update gitea config file permissions post install
+  file:
+    path: "/etc/gitea/app.ini"
+    mode: 0640
+    owner: root
+    group: git
+  when: gitea_config_check.stat.exists

ansible/roles/gitea/tasks/templates/gitea.service.j2

@@ -0,0 +1,85 @@
+[Unit]
+Description=Gitea (Git with a cup of tea)
+After=network.target
+###
+# Don't forget to add the database service dependencies
+###
+#
+#Wants=mysql.service
+#After=mysql.service
+#
+#Wants=mariadb.service
+#After=mariadb.service
+#
+#Wants=postgresql.service
+#After=postgresql.service
+#
+#Wants=memcached.service
+#After=memcached.service
+#
+#Wants=redis.service
+#After=redis.service
+#
+###
+# If using socket activation for main http/s
+###
+#
+#After=gitea.main.socket
+#Requires=gitea.main.socket
+#
+###
+# (You can also provide gitea an http fallback and/or ssh socket too)
+#
+# An example of /etc/systemd/system/gitea.main.socket
+###
+##
+## [Unit]
+## Description=Gitea Web Socket
+## PartOf=gitea.service
+##
+## [Socket]
+## Service=gitea.service
+## ListenStream=<some_port>
+## NoDelay=true
+##
+## [Install]
+## WantedBy=sockets.target
+##
+###
+
+[Service]
+# Uncomment the next line if you have repos with lots of files and get a HTTP 500 error because of that
+# LimitNOFILE=524288:524288
+RestartSec=2s
+Type=simple
+User=git
+Group=git
+WorkingDirectory=/var/lib/gitea/
+# If using Unix socket: tells systemd to create the /run/gitea folder, which will contain the gitea.sock file
+# (manually creating /run/gitea doesn't work, because it would not persist across reboots)
+#RuntimeDirectory=gitea
+ExecStart=/usr/local/bin/gitea web --config /etc/gitea/app.ini
+Restart=always
+Environment=USER=git HOME=/home/git GITEA_WORK_DIR=/var/lib/gitea
+# If you install Git to directory prefix other than default PATH (which happens
+# for example if you install other versions of Git side-to-side with
+# distribution version), uncomment below line and add that prefix to PATH
+# Don't forget to place git-lfs binary on the PATH below if you want to enable
+# Git LFS support
+#Environment=PATH=/path/to/git/bin:/bin:/sbin:/usr/bin:/usr/sbin
+# If you want to bind Gitea to a port below 1024, uncomment
+# the two values below, or use socket activation to pass Gitea its ports as above
+###
+#CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+#AmbientCapabilities=CAP_NET_BIND_SERVICE
+###
+# In some cases, when using CapabilityBoundingSet and AmbientCapabilities option, you may want to
+# set the following value to false to allow capabilities to be applied on gitea process. The following
+# value if set to true sandboxes gitea service and prevent any processes from running with privileges
+# in the host user namespace.
+###
+#PrivateUsers=false
+###
+
+[Install]
+WantedBy=multi-user.target