feat: initial commit

roles/podman_forgejo/templates/forgejo.container

@@ -0,0 +1,28 @@
+[Unit]
+Requires=mariadb.service
+After=mariadb.service
+
+[Container]
+ContainerName=forgejo
+Environment=USER_UID=1000
+Environment=USER_GID=1000
+Environment=FORGEJO__database__DB_TYPE=mysql
+Environment=FORGEJO__database__HOST=mariadb:3306
+Environment=FORGEJO__database__NAME={{ podman_forgejo_mariadb_database }}
+Environment=FORGEJO__database__USER={{ podman_forgejo_mariadb_user }}
+Environment=FORGEJO__database__PASSWD={{ podman_forgejo_mariadb_password }}
+Environment=FORGEJO__oauth2_client__ENABLE_AUTO_REGISTRATION=true
+Environment=FORGEJO__server__LANDING_PAGE=/explore/repos
+Image=codeberg.org/forgejo/forgejo:11
+Network=frontend.network
+Network=forgejo.network
+PublishPort=22:22
+Volume=/home/forge/forgejo:/data
+Volume=/etc/timezone:/etc/timezone:ro
+Volume=/etc/localtime:/etc/localtime:ro
+
+[Service]
+Restart=always
+
+[Install]
+WantedBy=default.target

roles/podman_forgejo/templates/forgejo.network

@@ -0,0 +1,2 @@
+[Network]
+NetworkName=forgejo

roles/podman_forgejo/templates/frontend.network

@@ -0,0 +1,2 @@
+[Network]
+NetworkName=frontend

roles/podman_forgejo/templates/mariadb.container

@@ -0,0 +1,15 @@
+[Container]
+ContainerName=mariadb
+Environment=MARIADB_ROOT_PASSWORD={{ podman_forgejo_mariadb_root_password }}
+Environment=MARIADB_USER={{ podman_forgejo_mariadb_user }}
+Environment=MARIADB_PASSWORD={{ podman_forgejo_mariadb_password }}
+Environment=MARIADB_DATABASE={{ podman_forgejo_mariadb_database }}
+Image=docker.io/mariadb:11
+Network=forgejo
+Volume=/home/{{ podman_forgejo_podman_rootless_user }}/mysql:/var/lib/mysql
+
+[Service]
+Restart=always
+
+[Install]
+WantedBy=default.target

roles/podman_forgejo/templates/nginx.conf

@@ -0,0 +1,42 @@
+# {{ ansible_managed }}
+
+server {
+    listen 80;
+    listen [::]:80;
+
+    server_name {{ podman_forgejo_web_hostname }};
+    server_tokens off;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://{{ podman_forgejo_web_hostname }}$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    http2 on;
+
+    server_name {{ podman_forgejo_web_hostname }};
+    server_tokens off;
+
+    ssl_certificate /etc/letsencrypt/live/{{ podman_forgejo_web_hostname }}/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/{{ podman_forgejo_web_hostname }}/privkey.pem;
+
+    location / {
+        proxy_pass http://forgejo:3000;
+
+        proxy_set_header Connection $http_connection;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        client_max_body_size 512M;
+    }
+}