Integrate gitea into OBS-Appliance

[M0ses]

Decisions/Definitions

• URL: https://<FQHN>/gitea/

Open Question

• Is a shared user database required?
• Should the API act as authentication proxy?
  • HINT: User authentication via reverse proxy request header gogs/gogs#165
• How to proceed with Admin user account?
  The login/user names admin and Admin are prohibited in gitea

Checklist

• Add package gitea to the OBS-Appliance
• Enable gitea service on startup
• Create default configuration for gitea
  • [server]
    • ROOT_URL = https://<FQHN>/gitea
    • HTTP_ADDR = 127.0.0.1
  • [database]
    • USER = root
    • PASSWD = opensuse
  • [security]
    • INSTALL_LOCK = true
    • REVERSE_PROXY_TRUSTED_PROXIES = 127.0.0.0/8,::1/128
• mysql -u root -popensuse 'CREATE DATABASE gitea'
• Deploy gitea database in mysql
  • su -c 'gitea migrate' - gitea
• Create default user for gitea
  • gitea admin user create --username obsadmin --password opensuse --admin --email root@localhost

[hennevogel]

Why would we ship this in the appliance?

[M0ses]

My playgrounds:

https://build.opensuse.org/project/show/home:M0ses:OBS:Server:Unstable

https://github.com/M0ses/open-build-service/tree/fix_issue_16687

[hennevogel]

We integrate with a ton of services. Some of them even more deeply like rabbit, postfix, bugzilla, influxdb. None of them we ship as it would mean increased maintenance burden on the appliance and our track record of maintaining appliances is very poor. Why we we do this differently with gitea?