Relocated LXC 114's own admin sshd to port 2200 (systemd ssh.socket override) to free port 22 for Forgejo's git-SSH, dropping the ugly :2222 from every clone URL. Updated the 5 hosts' remotes/SSH config and the corresponding UniFi rules to match.
26 lines
1 KiB
Text
26 lines
1 KiB
Text
# Forgejo
|
|
FORGEJO_VERSION=10
|
|
FORGEJO_HTTP_PORT=3000
|
|
# Defaults to 2222 because the LXC's own system sshd already owns port 22.
|
|
# To use the standard port 22 for git-over-SSH instead, first move the LXC's
|
|
# own admin sshd off 22 (e.g. via a systemd ssh.socket override setting
|
|
# ListenStream to another port), then set FORGEJO_SSH_PORT=22 here.
|
|
FORGEJO_SSH_PORT=2222
|
|
FORGEJO_BIND_IP=0.0.0.0
|
|
FORGEJO_MEM_LIMIT=1G
|
|
|
|
# Full URL where Forgejo is reachable (used for clone URLs, webhooks, CSRF)
|
|
FORGEJO_ROOT_URL=https://git.home.example.com
|
|
FORGEJO_DOMAIN=git.home.example.com
|
|
|
|
# Generate with: openssl rand -base64 32
|
|
FORGEJO_DB_PASSWORD=<random-secret>
|
|
|
|
# Root of the UNAS forgejo_data share (bind-mounted into the LXC). Must
|
|
# contain repositories/, lfs/, attachments/, and avatars/ subdirectories.
|
|
FORGEJO_DATA_ROOT=/mnt/unas/forgejo_data
|
|
|
|
# false = open self-signup; leave true and create accounts with
|
|
# `docker exec forgejo forgejo admin user create ...` instead.
|
|
FORGEJO_DISABLE_REGISTRATION=true
|
|
FORGEJO_REQUIRE_SIGNIN_VIEW=false
|