infra/k8s/forgejo/statefulset.yaml

apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: forgejo
  namespace: forgejo
spec:
  selector:
    matchLabels:
      app: forgejo
  serviceName: forgejo
  replicas: 1
  template:
    metadata:
      labels:
        app: forgejo
    spec:
      containers:
      - image: codeberg.org/forgejo/forgejo:1.21
        name: forgejo
        resources: {}
        volumeMounts:
          - name: forgejo-data
            mountPath: /data
        envFrom:
          - secretRef:
              name: forgejo
        env:
          - name: FORGEJO__DEFAULT__APP_NAME
            value: Janky Solutions
          - name: FORGEJO__server__DOMAIN
            value: git.janky.solutions
          - name: FORGEJO__server__ROOT_URL
            value: https://git.janky.solutions/
          - name: FORGEJO__openid__ENABLE_OPENID_SIGNUP
            value: "false"
          - name: FORGEJO__oauth2_client__REGISTER_EMAIL_CONFIRM
            value: "false"
          - name: FORGEJO__oauth2_client__ENABLE_AUTO_REGISTRATION
            value: "true"
          - name: FORGEJO__service__ENABLE_NOTIFY_MAIL
            value: "true"
          - name: FORGEJO__service__DEFAULT_KEEP_EMAIL_PRIVATE
            value: "true"
          - name: FORGEJO__service__SHOW_REGISTRATION_BUTTON
            value: "false"
          - name: FORGEJO__service__ALLOW_ONLY_EXTERNAL_REGISTRATION
            value: "true"
          - name: FORGEJO__service__NO_REPLY_ADDRESS
            value: noreply.git.janky.solutions
          - name: FORGEJO__mailer__ENABLED
            value: "true"
          - name: FORGEJO__mailer__PROTOCOL
            value: smtps
          - name: FORGEJO__mailer__SMTP_ADDR
            value: mx1.janky.email
          - name: FORGEJO__mailer__USER
            value: git@janky.solutions
          - name: FORGEJO__mailer__FROM
            value: git@janky.solutions
          - name: FORGEJO__email.incoming__ENABLED
            value: "true"
          - name: FORGEJO__email.incoming__REPLY_TO_ADDRESS
            value: git+%{token}@janky.solutions
          - name: FORGEJO__email.incoming__HOST
            value: mx1.janky.email
          - name: FORGEJO__email.incoming__PORT
            value: "993"
          - name: FORGEJO__email.incoming__USE_TLS
            value: "true"
          - name: FORGEJO__email.incoming__USERNAME
            value: git@janky.solutions
          - name: FORGEJO__metrics__ENABLED
            value: "true"
          - name: FORGEJO__repository__ENABLE_PUSH_CREATE_USER
            value: "true"
          - name: FORGEJO__repository__PREFERRED_LICENSES
            value: AGPL-3.0-or-later,LGPL-3.0-or-later,GPL-3.0-or-later,Apache-2.0,MIT
        ports:
          - name: web
            containerPort: 3000
          - name: ssh
            containerPort: 22
  volumeClaimTemplates:
  - metadata:
      name: forgejo-data
    spec:
      accessModes: ["ReadWriteOnce"]
      resources:
        requests:
          storage: 10Gi