qvest-task/docker/.env.example
aviyadeveloper 890a23e8d5
Some checks failed
Update Automation Tests / Integration Tests (pull_request) Failing after 40s
feat: complete CI/CD automation and fix deployment issues
Infrastructure & Permissions:
- Set recovery_window_in_days=0 on secrets for immediate deletion on destroy
- Add secretsmanager:UpdateSecret permission to EC2 IAM role
- Move SES secret definition from ses.tf to secrets.tf for better organization
- Create scripts/empty-s3-bucket.sh to handle versioned S3 object deletion
- Update Makefile to use S3 cleanup script in full-destroy target

Gitea Admin User Automation:
- Remove non-functional GITEA_ADMIN_* environment variables from docker-compose.yml
- Add CLI-based admin user creation via docker exec in deploy-gitea.yml
- Add database update to disable must_change_password requirement
- Fix runner token API call to use GET instead of POST

Runner Setup Fixes:
- Change runner gitea_instance to http://localhost:3000 (was failing with public URL)
- Fix registration to work from same host as Gitea

Domain Migration:
- Change domain from gitea.poll-streams.com to git.poll-streams.com
- Update DNS, docker-compose, nginx configs, ansible inventory, and SSL setup
- Enables fresh SSL certificate (avoids Let's Encrypt rate limit)

All changes enable zero-to-one deployment: make full-destroy && make full-deploy
2026-06-11 17:16:51 +02:00

20 lines
661 B
Plaintext

# This file will be generated automatically by Ansible
# Do not edit manually - it will be overwritten
# Database credentials (from AWS Secrets Manager)
DB_USER=gitea
DB_PASSWORD=<generated-from-secrets-manager>
DB_NAME=gitea
# Gitea admin credentials (from AWS Secrets Manager)
GITEA_ADMIN_USERNAME=<generated-from-secrets-manager>
GITEA_ADMIN_PASSWORD=<generated-from-secrets-manager>
GITEA_ADMIN_EMAIL=<generated-from-secrets-manager>
# AWS SES SMTP credentials (from AWS Secrets Manager)
SMTP_HOST=email-smtp.eu-central-1.amazonaws.com
SMTP_PORT=587
SMTP_USERNAME=<generated-from-ses>
SMTP_PASSWORD=<generated-from-ses>
ALERT_EMAIL=bleep.bloop@gmail.com