58 lines
2.0 KiB
Markdown
58 lines
2.0 KiB
Markdown
# authentik | Gitea | Leantime CI/CD stack
|
|
|
|
A portainer docker compose stack for Raspberry Pi with authentik, Gitea and Leantime for local CI/CD (you are accessing it right now)
|
|
|
|
I am trying to use my vpnstack NPM portainer docker compose setup to use https for this, but failing miserably...
|
|
|
|
So far I got it working in my LAN, but https won't work.... tried but it always times out... I suspect it's the nginx it uses I had similar problems with snipeit on proxmox, but there I managed to fix it at the end, although local access was not possible anymore if I did...
|
|
|
|
steps taken:
|
|
in NPM settings, added
|
|
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
client_max_body_size 512M;
|
|
|
|
in the portainer editor, added
|
|
|
|
- GITEA__server__ROOT_URL=https://${GITEA_DOMAIN}
|
|
- GITEA__server__DOMAIN=${GITEA_DOMAIN}
|
|
- GITEA__server__SSH_DOMAIN=${GITEA_DOMAIN}
|
|
- GITEA__server__SSH_PORT=2022
|
|
- GITEA__server__HTTP_PORT=3000
|
|
- GITEA__server__PROTOCOL=http
|
|
- GITEA__server__HTTP_ADDR=0.0.0.0
|
|
- GITEA__server__LOCAL_ROOT_URL=http://localhost:3000/
|
|
|
|
where ${GITEA_DOMAIN} in the portainer env is set to my duckdns: JavITYourWay.duckdns.org
|
|
|
|
tried also with
|
|
|
|
extra_hosts:
|
|
- hostname:192.x.x.x
|
|
|
|
but saw no difference...
|
|
|
|
so now cat /data/gitea/conf/app.ini at least I know can be edited easily with - GITEA__server__XXXXX and it maps to ${XXXXX}
|
|
|
|
[server]
|
|
APP_DATA_PATH = /data/gitea
|
|
DOMAIN = XXXXX
|
|
SSH_DOMAIN = XXXXX
|
|
HTTP_PORT = XXXXX
|
|
ROOT_URL = http://XXXXX:3000
|
|
DISABLE_SSH = false
|
|
SSH_PORT = XXXXX
|
|
SSH_LISTEN_PORT = 22
|
|
LFS_START_SERVER = true
|
|
LFS_JWT_SECRET = XXXXX
|
|
PROTOCOL = XXXXX
|
|
HTTP_ADDR = 0.0.0.0
|
|
LOCAL_ROOT_URL = http://XXXXX:3000/
|
|
|
|
results: when forcing SSL in NPM timeout, so I had to not force it and revert back everything...
|
|
|
|
|
|
TO-DO:
|
|
- learn nginx properly to at least show Gitea via https to the world (right now only http works)
|
|
- make authentik also NPM so I can use it outside my LAN (strech GOAL) |