add oauth to gitea

nomad-job/platform/authelia.nomad.hcl

@@ -181,6 +181,19 @@ identity_providers:
           - 'email'
         userinfo_signed_response_alg: 'none'
         token_endpoint_auth_method: 'client_secret_basic' 
+      - client_id: 'gitea'
+        client_name: 'gitea'
+        client_secret:{{ with secret "secrets/data/authelia/gitea"}} {{ .Data.data.hash }} {{end}}
+        public: false
+        authorization_policy: 'one_factor'
+        redirect_uris:
+          - 'https://git.ducamps.eu/user/oauth2/authelia/callback'
+        scopes:
+          - 'openid'
+          - 'profile'
+          - 'email'
+        userinfo_signed_response_alg: 'none'
+        token_endpoint_auth_method: 'client_secret_basic'
 
 log:
   level: 'trace'

nomad-job/platform/gitea.nomad

@@ -81,7 +81,11 @@ job "git" {
         GITEA__database__HOST                = "active.db.service.consul"
         GITEA__database__NAME                = "gitea"
         GITEA__database__USER                = "gitea"
-        GITEA__service__DISABLE_REGISTRATION = "true"
+        GITEA__service__DISABLE_REGISTRATION = "false"
+        GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION = "true"
+        GITEA__service__SHOW_REGISTRATION_BUTTON = "false"
+        GITEA__openid__ENABLE_OPENID_SIGNIN = "false"
+        GITEA__openid__ENABLE_OPENID_SIGNUP = "true"
         GITEA__repository__ROOT              = "/data/gitea-repositories"
         GITEA__server__APP_DATA_PATH         = "/data"
         GITEA__server__LFS_CONTENT_PATH      = "/data/lfs"

script/generate-vault-secret

@@ -73,7 +73,8 @@ def main() -> None:
         "authelia/immich",
         "authelia/mealie",
         "authelia/grafana",
-        "authelia/vikunja"
+        "authelia/vikunja",
+        "authelia/gitea"
     ]
 
     token=os.getenv('VAULT_TOKEN',"")