57 lines
2.7 KiB
Plaintext
57 lines
2.7 KiB
Plaintext
# git Stack — Secrets Reference
|
|
# Source: git.env
|
|
#
|
|
# Add SECRET values to Woodpecker at:
|
|
# https://woodpecker.bryanmail.net
|
|
# homelab/compose-files → Settings → Secrets
|
|
#
|
|
# ⚠️ WARNING: This stack runs Gitea itself — the source of all CI/CD pipelines.
|
|
# If this stack fails to deploy, Woodpecker pipelines cannot trigger.
|
|
# Migrate this stack carefully. Test thoroughly before removing the .env file.
|
|
# Recommended: migrate AFTER all other stacks are confirmed working.
|
|
|
|
# ── SECRETS (add to Woodpecker) ───────────────────────────────────────────────
|
|
|
|
# Woodpecker secret name: git_db_password
|
|
# Used for: Gitea PostgreSQL database password
|
|
# Env var in .env: GITEA__database__PASSWD
|
|
git_db_password=
|
|
|
|
# Woodpecker secret name: git_runner_token
|
|
# Used for: Gitea Act Runner registration token
|
|
# Find in Gitea: Admin → Actions → Runners → Create runner
|
|
# Env var in .env: GITEA_RUNNER_REGISTRATION_TOKEN
|
|
git_runner_token=
|
|
|
|
# Woodpecker secret name: git_mcp_access_token
|
|
# Used for: Gitea MCP server API access token
|
|
# Find in Gitea: User Settings → Applications → Access Tokens
|
|
# Env var in .env: GITEA_MCP_ACCESS_TOKEN
|
|
git_mcp_access_token=
|
|
|
|
# ── NON-SECRETS (safe in compose file or .env) ────────────────────────────────
|
|
|
|
# GITEA__database__DB_TYPE Database type (postgres)
|
|
# GITEA__database__HOST PostgreSQL hostname:port
|
|
# GITEA__database__NAME Database name (gitea)
|
|
# GITEA__database__USER Database username (gitea)
|
|
# ENABLE_OPENID_SIGNIN Boolean flag
|
|
# ENABLE_OPENID_SIGNUP Registration mode
|
|
# WHITELISTED_URIS OpenID whitelist
|
|
# BLACKLIST_URLS OpenID blacklist
|
|
# REGISTER_EMAIL_CONFIRM Boolean flag
|
|
# OPENID_CONNECT_SCOPES OIDC scopes
|
|
# ENABLE_AUTO_REGISTRATION Boolean flag
|
|
# GITEA_INSTANCE_URL Gitea internal URL for runner
|
|
# GITEA_RUNNER_NAME Runner display name
|
|
# GITEA_RUNNER_LABELS Runner labels
|
|
# GITEA_MCP_HOST Gitea public URL for MCP server
|
|
|
|
# ── Woodpecker provision-secrets case entry ───────────────────────────────────
|
|
#
|
|
# git)
|
|
# create_or_update_secret "git_db_password" "$GIT_DB_PASSWORD"
|
|
# create_or_update_secret "git_runner_token" "$GIT_RUNNER_TOKEN"
|
|
# create_or_update_secret "git_mcp_access_token" "$GIT_MCP_ACCESS_TOKEN"
|
|
# ;;
|