forgejo

Deploy the Forgejo Git service as a Podman quadlet.

giftpilz0.container27 variables

Usage

playbook.yml

- hosts: all
  roles:
    - role: giftpilz0.container.forgejo

Variables

• podman_userstr

  System user for rootless podman operations.

  Default{{ ansible_user }}
• forgejo_imagestr

  Image name without tag.

  Defaultcodeberg.org/forgejo/forgejo
• forgejo_versionstr

  Container image version.

  Default17.0.0
• forgejo_autoupdatebool

  Enable podman auto-update for this container.

  Defaulttrue
• forgejo_network_enabledbool

  Create and manage the podman network.

  Defaulttrue
• forgejo_network_namestr

  Podman network name.

  Defaultforgejo-internal
• forgejo_network_driverstr

  Podman network driver.

  Defaultbridge
• forgejo_port_map_enabledbool

  Expose container ports on the host.

  Defaulttrue
• forgejo_bind_ipstr

  Host IP to bind exposed ports to.

  Default127.0.0.1
• forgejo_port_maplist[str]

  Host:container port mappings.

  Default

  - 3000:3000
  - '{{ forgejo_ssh_port }}:22'

• forgejo_domainstr

  External domain for the Forgejo instance.

  Default""
• forgejo_ssh_portint

  host port of the git SSH server, shown in clone URLs.

  Default2222
• forgejo_log_levelstr

  Forgejo log level.

  DefaultInfo
• forgejo_db_hoststr

  PostgreSQL container hostname.

  Defaultpostgresql-pod
• forgejo_db_namestr

  Database name.

  Defaultforgejo
• forgejo_db_userstr

  Database user.

  Defaultforgejo
• forgejo_db_passwordstr

  Database user password.

  Default""
• forgejo_oauth_namestr

  OAuth2 provider display name.

  Default""
• forgejo_oauth_domainstr

  OAuth2 provider domain.

  Default""
• forgejo_oauth_client_idstr

  OAuth2 client ID for external authentication.

  Default""
• forgejo_oauth_client_secretstr

  OAuth2 client secret.

  Default""
• forgejo_oauth_admin_groupstr

  OAuth2 group that grants admin access.

  Defaultforgejo-admin
• forgejo_environment_varsdict

  Extra environment variables injected into the container.

  Default

  USER_UID: '1000'
  USER_GID: '1000'
  APP_NAME: Forgejo
  APP_SLOGAN: ''
  FORGEJO__server__DOMAIN: '{{ forgejo_domain }}'
  FORGEJO__server__ROOT_URL: https://{{ forgejo_domain }}/
  FORGEJO__server__PROTOCOL: http
  FORGEJO__server__HTTP_PORT: 3000
  FORGEJO__server__SSH_PORT: '{{ forgejo_ssh_port }}'
  SSH_LISTEN_PORT: 22
  FORGEJO__server__OFFLINE_MODE: false
  FORGEJO__log__LEVEL: '{{ forgejo_log_level }}'
  FORGEJO__database__DB_TYPE: postgres
  FORGEJO__database__HOST: '{{ forgejo_db_host }}:5432'
  FORGEJO__database__NAME: '{{ forgejo_db_name }}'
  FORGEJO__database__USER: '{{ forgejo_db_user }}'
  FORGEJO__database__PASSWD: '{{ forgejo_db_password }}'
  FORGEJO__security__LOGIN_REMEMBER_DAYS: '14'
  FORGEJO__security__INSTALL_LOCK: true
  FORGEJO__service__DISABLE_REGISTRATION: true
  FORGEJO__service__ALLOW_ONLY_EXTERNAL_REGISTRATION: true
  FORGEJO__service__SHOW_REGISTRATION_BUTTON: false
  FORGEJO__service__ENABLE_INTERNAL_SIGNIN: true
  FORGEJO__oauth2_client__ENABLE_AUTO_REGISTRATION: true
  FORGEJO__oauth2_client__USERNAME: preferred_username
  FORGEJO__oauth2_client__UPDATE_AVATAR: true
  FORGEJO__oauth2_client__ACCOUNT_LINKING: auto
  FORGEJO__oauth2_client__OPENID_CONNECT_SCOPES: '"profile email"'
  FORGEJO__oauth2_client__ADMIN_GROUP: '{{ forgejo_oauth_admin_group }}'
  FORGEJO__openid__ENABLE_OPENID_SIGNIN: false
  FORGEJO__openid__ENABLE_OPENID_SIGNUP: false
  OAUTH_NAME: '{{ forgejo_oauth_name }}'
  OAUTH_CLIENT_ID: '{{ forgejo_oauth_client_id }}'
  OAUTH_CLIENT_SECRET: '{{ forgejo_oauth_client_secret }}'
  OAUTH_DISCOVERY_URL: https://{{ forgejo_oauth_domain }}/.well-known/openid-configuration
  OAUTH_SCOPES: openid profile email groups
  OAUTH_ADMIN_GROUP: '{{ forgejo_oauth_admin_group }}'

• forgejo_entrypointstr

  Optional Forgejo container entrypoint override.

  Default""
• forgejo_oauth_init_entrypointstr

  Optional Forgejo OAuth initialization container entrypoint override.

  Default""
• forgejo_extra_fileslist[dict]

  Arbitrary file entries with src (controller path) or source (target path), dest, optional mount, mode, and template.

  Default[]
• forgejo_extra_dirslist[dict]

  Arbitrary directory entries with src (controller directory) or source (target path), dest, optional mount and mode.

  Default[]