From 048ba28488b9372882a97dad9dc97cb7d17025f8 Mon Sep 17 00:00:00 2001
From: Christopher Berger <chris@wittenberger.us>
Date: Fri, 29 May 2026 01:07:16 +0000
Subject: [PATCH] Add app.ini

---
 app.ini | 106 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 106 insertions(+)
 create mode 100644 app.ini

diff --git a/app.ini b/app.ini
new file mode 100644
index 0000000..f1ad181
--- /dev/null
+++ b/app.ini
@@ -0,0 +1,106 @@
+APP_NAME = Uzik's Git Repo
+RUN_MODE = prod
+RUN_USER = git
+WORK_PATH = /data/gitea
+
+[repository]
+ROOT = /data/git/repositories
+
+[repository.local]
+LOCAL_COPY_PATH = /data/gitea/tmp/local-repo
+
+[repository.upload]
+TEMP_PATH = /data/gitea/uploads
+
+[server]
+APP_DATA_PATH = /data/gitea
+DOMAIN = <your_fqdn_or_IP>
+SSH_DOMAIN = <your_fqdn_or_IP>
+HTTP_PORT = 3000
+ROOT_URL = https://<your_fqdn_or_IP>
+DISABLE_SSH = false
+SSH_PORT = 22   # external port 222 forwarded to 22 from docker-compose.yml
+SSH_LISTEN_PORT = 22   # external port 222 forwarded to 22 from docker-compose.yml
+LFS_START_SERVER = true
+LFS_JWT_SECRET = <redacted>
+OFFLINE_MODE = true
+LANDING_PAGE = login
+
+[database]
+PATH = /data/gitea/gitea.db
+DB_TYPE = postgres
+HOST = db:5432
+NAME = gitea
+USER = gitea
+PASSWD = <redacted>
+LOG_SQL = false
+SCHEMA =
+SSL_MODE = disable
+
+[indexer]
+ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve
+
+[session]
+PROVIDER_CONFIG = /data/gitea/sessions
+PROVIDER = file
+
+[picture]
+AVATAR_UPLOAD_PATH = /data/gitea/avatars
+REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
+
+[attachment]
+PATH = /data/gitea/attachments
+
+[log]
+MODE = console
+LEVEL = info
+ROOT_PATH = /data/gitea/log
+
+[security]
+INSTALL_LOCK = true
+SECRET_KEY =
+REVERSE_PROXY_LIMIT = 2
+REVERSE_PROXY_TRUSTED_PROXIES = <'*' for all or IP of your reverse proxy>
+INTERNAL_TOKEN = <redacted>
+PASSWORD_HASH_ALGO = pbkdf2
+COOKIE_SECURE = true
+COOKIE_HTTPONLY = true
+
+[service]
+DISABLE_REGISTRATION = true # false if you want to allow others to register
+REQUIRE_SIGNIN_VIEW = false # true if you only want authenticated users to view
+REGISTER_EMAIL_CONFIRM = true # false if you dont require an email confirmation to register
+ENABLE_NOTIFY_MAIL = true
+ALLOW_ONLY_EXTERNAL_REGISTRATION = false
+ENABLE_CAPTCHA = true
+DEFAULT_KEEP_EMAIL_PRIVATE = true # hides email addresses
+DEFAULT_ALLOW_CREATE_ORGANIZATION = true
+DEFAULT_ENABLE_TIMETRACKING = true
+NO_REPLY_ADDRESS = noreply.localhost  # the shown @email address for no-reply
+
+[lfs]
+PATH = /data/git/lfs
+
+[mailer]
+ENABLED = true
+SMTP_ADDR = <smtp_mail_server_IP_or_FQDN>
+SMTP_PORT = 587 # TLS Submission, change to what you want/use
+FROM = <from mailer address>
+USER = <sending mailer address>
+PASSWD = <redacted>
+
+[openid]
+ENABLE_OPENID_SIGNIN = false
+ENABLE_OPENID_SIGNUP = false
+
+[cron.update_checker]
+ENABLED = true
+
+[repository.pull-request]
+DEFAULT_MERGE_STYLE = merge
+
+[repository.signing]
+DEFAULT_TRUST_MODEL = committer
+
+[oauth2]
+JWT_SECRET = <redacted>
\ No newline at end of file