server/scripts/sh/setup.forgejo.sh at main · Altherneum/server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
# Forgejo
## VARIABLES
VERSIONID="13.0.3"
FORGEJOVERSION="v"$VERSIONID
FORGEJOVERSIONNAME="forgejo-"$VERSIONID
LINUXVERSION="linux-amd64"
FORGEJOFILENAME=$FORGEJOVERSIONNAME"-"$LINUXVERSION
FORGEJOFULLFILENAME=$FORGEJOVERSION"/"$FORGEJOFILENAME
## Téléchargement
### https://forgejo.org/download/
echo "Downloading : "$FORGEJOFULLFILENAME
wget -O /tmp/$FORGEJOVERSIONNAME https://code.forgejo.org/forgejo/forgejo/releases/download/$FORGEJOFULLFILENAME

## GPG checkup
gpg --keyserver keys.openpgp.org --recv EB114F5E6C0DC2BCDD183550A4B61A2DC5923710
wget -O /tmp/$FORGEJOVERSIONNAME.asc https://code.forgejo.org/forgejo/forgejo/releases/download/$FORGEJOFULLFILENAME.asc
gpg --verify /tmp/$FORGEJOVERSIONNAME.asc /tmp/$FORGEJOVERSIONNAME
### Vérifier si /$FORGEJOFILENAME.asc to delete or not

## Copy & chmod
### https://forgejo.org/docs/latest/admin/installation/binary/
### https://forgejo.org/docs/latest/admin/setup/reverse-proxy/
cp /tmp/$FORGEJOVERSIONNAME /usr/local/bin/forgejo
rm $FORGEJOVERSIONNAME
chmod 755 /usr/local/bin/forgejo

## User creation
adduser --system --shell /bin/bash --gecos 'Git Version Control' --group --disabled-password --home /home/git git

## Folders & chown
### lib
mkdir /var/lib/forgejo
chown git:git /var/lib/forgejo && chmod 750 /var/lib/forgejo
### data & Repo
mkdir /etc/forgejo
chown root:git /etc/forgejo && chmod 770 /etc/forgejo
### log
mkdir /var/log/forgejo
chown git:git /var/log/forgejo && chmod 750 /var/log/forgejo

## SystemD
# wget -O /etc/systemd/system/forgejo.service https://code.forgejo.org/forgejo/forgejo/raw/branch/forgejo/contrib/systemd/forgejo.service
wget -O /etc/systemd/system/forgejo.service 'https://raw.githubusercontent.com/Altherneum/server/main/scripts/forgejo.service'
systemctl daemon-reload

## app.ini
### https://forgejo.org/docs/latest/admin/config-cheat-sheet/
tee /etc/forgejo/app.ini >/dev/null <<EOF
[server]
DOMAIN = git.altherneum.fr
HTTP_ADDR = 0.0.0.0
HTTP_PORT = 3003
ROOT_URL = https://git.altherneum.fr/
APP_DATA_PATH = /var/lib/forgejo/data
SSH_DOMAIN = git.altherneum.fr
DISABLE_SSH = true
SSH_PORT = 22
DISABLE_HTTP_GIT = false
LFS_START_SERVER = true
OFFLINE_MODE = true
[database]
DB_TYPE = sqlite3
PATH = /var/lib/forgejo/data/forgejo.db
[repository]
ROOT = /var/lib/forgejo/data/repositories
[log]
MODE = file
LEVEL = info
ROOT_PATH = /var/log/forgejo
[mailer]
ENABLED = true
FROM = git@altherneum.fr
PROTOCOL = sendmail
SENDMAIL_PATH = /usr/sbin/sendmail
SENDMAIL_ARGS = "--"
[lfs]
PATH = /var/lib/forgejo/data/lfs
[service]
REGISTER_EMAIL_CONFIRM = true
ENABLE_NOTIFY_MAIL = true
DISABLE_REGISTRATION = true
ALLOW_ONLY_EXTERNAL_REGISTRATION = false
ENABLE_CAPTCHA = false
REQUIRE_SIGNIN_VIEW = false
DEFAULT_KEEP_EMAIL_PRIVATE = false
DEFAULT_ALLOW_CREATE_ORGANIZATION = true
DEFAULT_ENABLE_TIMETRACKING = true
NO_REPLY_ADDRESS = noreply.git.altherneum.fr
[openid]
ENABLE_OPENID_SIGNIN = true
ENABLE_OPENID_SIGNUP = true
[cron.update_checker]
ENABLED = true
[session]
PROVIDER = file


EOF
chown git:git /etc/forgejo/app.ini

# Password file
password="ABC123!"
htpasswd -cb /etc/apache2/.htpasswd-git git $password

## Start
systemctl enable forgejo.service
systemctl start forgejo.service