Bump gitea.

gitea.yml

@@ -2,7 +2,7 @@
 
 - hosts: gitea
   vars:
-    gitea_version: "1.19.1"  # To upgrade, read the README file first.
+    gitea_version: "1.20.0"  # To upgrade, read the README file first.
     gitea_internal_token: !vault |
           $ANSIBLE_VAULT;1.1;AES256
           65396439373538656633396363313333663233343661643739633135306131613434353335353634
@@ -14,7 +14,14 @@
           39346334353266613234363664643030303565313065313334333833383337623637366132663435
           61386535353635386339383731323464323135366362613734393833386632393166393261373433
           61363664376330343465656431316163396533326634643636326537383032323636
-
+    gitea_oauth2_jwt_secret: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          64323839343261376362643130326334643964383535373531303164643966313463393530323437
+          3631646666313136373431326162356438393964643937310a613364653034383465376166633162
+          65643135623837326464396666313339633961366638656130323463626437623134313139663732
+          6664313665393739350a633638303235396639373866643863613865623061643364323963376532
+          64356262633634613730306230653962366132393733363739363232316461343164636436323130
+          3037633332343439363132323163323239383634313439336262
     nft_deny_list: |
       ip saddr 122.161.48.24 counter drop
 

roles/gitea/templates/app.ini.j2

@@ -1,58 +1,61 @@
 APP_NAME = Le Gitea de l'AFPy
 RUN_USER = git
 RUN_MODE = prod
+WORK_PATH = /var/lib/gitea
 
 [ui]
 SHOW_USER_EMAIL = false
 
 [database]
-DB_TYPE  = postgres
-HOST     = /run/postgresql/
-NAME     = gitea
-USER     =
-PASSWD   =
-SCHEMA   =
+DB_TYPE = postgres
+HOST = /run/postgresql/
+NAME = gitea
+USER =
+PASSWD =
+SCHEMA =
 SSL_MODE = disable
-CHARSET  = utf8
-PATH     = /var/lib/gitea/data/gitea.db
-LOG_SQL  = false
+CHARSET = utf8
+PATH = /var/lib/gitea/data/gitea.db
+LOG_SQL = false
 
 [repository]
 ROOT = /var/lib/gitea/data/gitea-repositories
 DEFAULT_PRIVATE = public
+DEFAULT_PUSH_CREATE_PRIVATE = false
+ENABLE_PUSH_CREATE_USER = true
+ENABLE_PUSH_CREATE_ORG = true
 
 [server]
-SSH_DOMAIN       = git.afpy.org
-DOMAIN           = git.afpy.org
-HTTP_PORT        = 3000
-ROOT_URL         = https://git.afpy.org/
-OFFLINE_MODE     = true
-DISABLE_SSH      = false
-SSH_PORT         = 22
+SSH_DOMAIN = git.afpy.org
+DOMAIN = git.afpy.org
+HTTP_PORT = 3000
+ROOT_URL = https://git.afpy.org/
+OFFLINE_MODE = true
+DISABLE_SSH = false
+SSH_PORT = 22
 LFS_START_SERVER = false
-OFFLINE_MODE     = false
 
 [mailer]
-ENABLED       = true
-FROM          = gitea@afpy.org
-PROTOCOL      = sendmail
+ENABLED = true
+FROM = gitea@afpy.org
+PROTOCOL = sendmail
 SENDMAIL_PATH = /usr/sbin/sendmail
-SENDMAIL_ARGS = "--"
+SENDMAIL_ARGS = --
 
 [service]
-REGISTER_EMAIL_CONFIRM            = true
-ENABLE_NOTIFY_MAIL                = true
-DISABLE_REGISTRATION              = false
-ALLOW_ONLY_EXTERNAL_REGISTRATION  = false
-ENABLE_CAPTCHA                    = false
-REQUIRE_SIGNIN_VIEW               = false
-DEFAULT_KEEP_EMAIL_PRIVATE        = false
+REGISTER_EMAIL_CONFIRM = true
+ENABLE_NOTIFY_MAIL = true
+DISABLE_REGISTRATION = false
+ALLOW_ONLY_EXTERNAL_REGISTRATION = false
+ENABLE_CAPTCHA = false
+REQUIRE_SIGNIN_VIEW = false
+DEFAULT_KEEP_EMAIL_PRIVATE = false
 DEFAULT_ALLOW_CREATE_ORGANIZATION = true
-DEFAULT_ENABLE_TIMETRACKING       = true
-NO_REPLY_ADDRESS                  = noreply.localhost
+DEFAULT_ENABLE_TIMETRACKING = true
+NO_REPLY_ADDRESS = noreply.localhost
 
 [picture]
-DISABLE_GRAVATAR        = true
+DISABLE_GRAVATAR = true
 ENABLE_FEDERATED_AVATAR = true
 
 [openid]
@@ -64,36 +67,30 @@ PROVIDER = db
 COOKIE_SECURE = true
 
 [log]
-MODE      = console
-LEVEL     = info
+MODE = console
+LEVEL = info
 ROOT_PATH = /var/lib/gitea/log
-ROUTER    = console
+ROUTER = console
 
 # [i18n]
 # see https://github.com/go-gitea/gitea/issues/21199
 # LANGS     = fr_FR,en_US
 # NAMES     = Français,English
-
 [packages]
-ENABLED: true
-LIMIT_TOTAL_OWNER_SIZE: 200 MB
-LIMIT_SIZE_COMPOSER: 0
-LIMIT_SIZE_CONAN: 0
-LIMIT_SIZE_CONTAINER: 0
-LIMIT_SIZE_GENERIC: 0
-LIMIT_SIZE_HELM: 0
-LIMIT_SIZE_MAVEN: 0
-LIMIT_SIZE_NPM: 0
-LIMIT_SIZE_NUGET: 0
-LIMIT_SIZE_PUB: 0
-LIMIT_SIZE_PYPI: 200 MB
-LIMIT_SIZE_RUBYGEMS: 0
-LIMIT_SIZE_VAGRANT: 0
-
-[repository]
-DEFAULT_PUSH_CREATE_PRIVATE = false
-ENABLE_PUSH_CREATE_USER = true
-ENABLE_PUSH_CREATE_ORG = true
+ENABLED = true
+LIMIT_TOTAL_OWNER_SIZE = 200 MB
+LIMIT_SIZE_COMPOSER = 0
+LIMIT_SIZE_CONAN = 0
+LIMIT_SIZE_CONTAINER = 0
+LIMIT_SIZE_GENERIC = 0
+LIMIT_SIZE_HELM = 0
+LIMIT_SIZE_MAVEN = 0
+LIMIT_SIZE_NPM = 0
+LIMIT_SIZE_NUGET = 0
+LIMIT_SIZE_PUB = 0
+LIMIT_SIZE_PYPI = 200 MB
+LIMIT_SIZE_RUBYGEMS = 0
+LIMIT_SIZE_VAGRANT = 0
 
 [repository.pull-request]
 DEFAULT_MERGE_STYLE = merge
@@ -102,18 +99,21 @@ DEFAULT_MERGE_STYLE = merge
 DEFAULT_TRUST_MODEL = committer
 
 [security]
-INSTALL_LOCK       = true
-INTERNAL_TOKEN     = {{ gitea_internal_token }}
+INSTALL_LOCK = true
+INTERNAL_TOKEN = {{ gitea_internal_token }}
 PASSWORD_HASH_ALGO = pbkdf2
 LOGIN_REMEMBER_DAYS = 90
 
 [markup.restructuredtext]
 ENABLED = true
 FILE_EXTENSIONS = .rst
-RENDER_COMMAND = "timeout 30s pandoc +RTS -M512M -RTS -f rst"
+RENDER_COMMAND = timeout 30s pandoc +RTS -M512M -RTS -f rst
 IS_INPUT_FILE = false
 
 [ssh.minimum_key_sizes]
 ED25519 = 256
 ECDSA = 256
 RSA = 1023
+
+[oauth2]
+JWT_SECRET = {{ gitea_oauth2_jwt_secret }}