Add first module : Gitea app

modules/apps/gitea/lib/scripts/install-gitea.sh

@@ -0,0 +1,90 @@
+#!/bin/bash
+set -euo pipefail
+
+source /opt/gitea/env.sh
+
+# Gitea user
+if ! id -u $GITEA_USER >/dev/null 2>&1; then
+    adduser \
+        --system \
+        --shell /bin/bash \
+        --gecos 'Git Version Control' \
+        --group \
+        --disabled-password \
+        --home /home/git \
+        $GITEA_USER
+fi
+echo "---- Gitea user created ----"
+
+# Gitea folder structure
+mkdir -p $GITEA_HOME/{custom,data,log}
+chown -R $GITEA_USER:$GITEA_USER $GITEA_HOME
+chmod -R 750 $GITEA_HOME
+
+if [ ! -f $GITEA_BINARY ]; then
+    wget -O /tmp/gitea "https://dl.gitea.com/gitea/$GITEA_VERSION/gitea-$GITEA_VERSION-linux-amd64"
+    chmod +x /tmp/gitea
+    mv /tmp/gitea $GITEA_BINARY
+fi
+echo "---- Gitea folder structure created ----"
+
+# Postgres initial config
+DB_PASS=$(openssl rand -base64 12)
+sudo -u postgres psql <<EOF
+CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';
+CREATE DATABASE $DB_NAME WITH OWNER $DB_USER TEMPLATE template0 ENCODING UTF8 LC_COLLATE 'en_US.UTF-8' LC_CTYPE 'en_US.UTF-8';
+EOF
+
+if ls -1 "$GITEA_BACKUPS_DIR"/gitea-dump-*.zip >/dev/null 2>&1; then
+    echo "---- Backup found, restoring Gitea ----"
+    /usr/local/bin/restore-backup.sh
+else
+    echo "---- No backup found in $GITEA_BACKUPS_DIR, skipping restore ----"
+fi
+
+sudo chown -R $GITEA_USER:$GITEA_USER $GITEA_BACKUPS_DIR
+sudo chmod -R 770 $GITEA_BACKUPS_DIR
+
+GITEA_SECRET_KEY=$("$GITEA_BINARY" generate secret SECRET_KEY)
+GITEA_JWT_SECRET=$("$GITEA_BINARY" generate secret JWT_SECRET)
+GITEA_INTERNAL_TOKEN=$("$GITEA_BINARY" generate secret INTERNAL_TOKEN)
+
+mkdir -p $(dirname "$GITEA_CONF")
+cat > "$GITEA_CONF" <<EOF
+[database]
+DB_TYPE = postgres
+HOST = 127.0.0.1:5432
+NAME = $DB_NAME
+USER = $DB_USER
+PASSWD = $DB_PASS
+SSL_MODE = disable
+
+[security]
+INSTALL_LOCK = true
+SECRET_KEY = $GITEA_SECRET_KEY
+JWT_SECRET = $GITEA_JWT_SECRET
+INTERNAL_TOKEN = $GITEA_INTERNAL_TOKEN
+
+[server]
+DOMAIN = gitea.aldon.fr
+HTTP_PORT = 3000
+ROOT_URL = https://gitea.aldon.fr
+DISABLE_SSH = false
+SSH_PORT = 22
+
+[repository]
+ROOT = /var/lib/gitea/data/repositories
+
+[service]
+DISABLE_REGISTRATION = true
+EOF
+echo "---- Generated Gitea app.ini with secrets ----"
+
+chown git:git $GITEA_CONF
+chmod 640 $GITEA_CONF
+
+systemctl daemon-reload
+systemctl enable gitea
+
+systemctl is-active --quiet gitea || systemctl start gitea
+echo "---- Gitea installation completed ----"