feat(deploy): add canonical Gitea recovery flows

2026-08-22 11:14:33 +03:00
parent a9ea31f00a
commit 502acd3771
14 changed files with 15257 additions and 4 deletions
@@ -0,0 +1,42 @@
+{
+  "schemaVersion": "nodedc.gitea.fresh-install.v1",
+  "action": "fresh-install",
+  "component": "gitea",
+  "installRoot": "/volume1/docker/nodedc-gitea",
+  "compose": {
+    "file": "docker-compose.gitea.yml",
+    "project": "nodedc-gitea",
+    "service": "gitea",
+    "sha256": "25868a40996c405543b4627d06499b68f43556e607d839e969a400b0bc0ddadb"
+  },
+  "runtime": {
+    "image": "docker.gitea.com/gitea:1.27.1-rootless@sha256:89dc3c214b3992e5bb01e05ad21139d7a8b302d3ea3d8942d3f7e904e92af148",
+    "platform": "linux/amd64",
+    "pullPolicy": "never",
+    "minimumComposeVersion": "2.20.1",
+    "transport": "unix:/run/gitea/gitea.sock",
+    "socketBind": "/volume1/docker/nodedc-gitea/socket:/run/gitea",
+    "ssh": "disabled-no-published-port",
+    "database": "fresh-sqlite-only",
+    "lfs": "disabled-pending-reviewed-restore-transition",
+    "networkMode": "none",
+    "logging": "bounded-json-file-10m-x3",
+    "stopGracePeriod": "30s"
+  },
+  "trust": {
+    "artifactSecrets": "forbidden",
+    "runtimeSecrets": "runner-managed-file-mounts",
+    "legacyRootAccess": "forbidden",
+    "legacyDatabaseImport": "forbidden",
+    "legacyRepositoryImport": "forbidden"
+  },
+  "reverseProxyPrerequisite": {
+    "managedOutsideArtifact": true,
+    "requiredDsmUpstream": "127.0.0.1:3000",
+    "requiredNginxBridge": "/usr/local/etc/nginx/conf.d/http.nodedc-gitea-uds.conf",
+    "requiredNginxBridgeSha256": "164f37a12a4f91e656cf20bd5b109978d16d723bdfde236653722aaf820780c9",
+    "requiredUnixUpstream": "/volume1/docker/nodedc-gitea/socket/gitea.sock",
+    "mustBeCompletedBeforeApply": true
+  },
+  "rollback": "stop-candidate-preserve-fresh-runtime-state-and-restore-source"
+}