Sergei Poljanski
2aca0d7669
Versions are pinned across the Ansible vars, compose files, Terraform providers and workflows, and nothing says when one is behind. Run Renovate daily from Forgejo Actions: one PR per available bump, with the upstream changelog in the body, which the deploy pipeline then dry-runs like any other branch. Variables are tracked through a "# renovate: datasource=... depName=..." comment above them; Forgejo, Traefik, the runner and its nix image get one here. The Paper JRE tag is left alone, the runner and nix bumps carry their manual follow-up steps in the PR, and Renovate's own image is bumped monthly. Needs the repository secrets RENOVATE_TOKEN (bot user with write access) and GH_COM_TOKEN (read-only github.com token for release notes). Assisted-by: Claude:opus-5-5
26 lines
909 B
YAML
26 lines
909 B
YAML
---
|
|
# renovate: datasource=docker depName=codeberg.org/forgejo/forgejo
|
|
forgejo_version: "15.0.11"
|
|
|
|
# The instance answers on every name below. forgejo_domain is the
|
|
# canonical one (ROOT_URL, clone URLs, mail links); the rest are aliases.
|
|
forgejo_domain: git.asxp.io
|
|
forgejo_alias_domains:
|
|
- git.czsk.it
|
|
|
|
forgejo_base_path: "{{ services_base_path }}/forgejo"
|
|
forgejo_http_port: 3000
|
|
|
|
# app.ini is owned by the container's git user
|
|
forgejo_uid: 1000
|
|
forgejo_gid: 1000
|
|
|
|
traefik_network: traefik
|
|
|
|
forgejo_secret_key: "{{ vault_forgejo_secret_key }}"
|
|
forgejo_internal_token: "{{ vault_forgejo_internal_token }}"
|
|
forgejo_jwt_secret: "{{ vault_forgejo_jwt_secret }}"
|
|
forgejo_lfs_jwt_secret: "{{ vault_forgejo_lfs_jwt_secret }}"
|
|
forgejo_server_lfs_jwt_secret: "{{ vault_forgejo_server_lfs_jwt_secret }}"
|
|
forgejo_smtp_user: "{{ vault_forgejo_smtp_user }}"
|
|
forgejo_smtp_password: "{{ vault_forgejo_smtp_password }}"
|