Some checks failed
Update Automation Tests / Integration Tests (pull_request) Failing after 40s
Infrastructure & Permissions: - Set recovery_window_in_days=0 on secrets for immediate deletion on destroy - Add secretsmanager:UpdateSecret permission to EC2 IAM role - Move SES secret definition from ses.tf to secrets.tf for better organization - Create scripts/empty-s3-bucket.sh to handle versioned S3 object deletion - Update Makefile to use S3 cleanup script in full-destroy target Gitea Admin User Automation: - Remove non-functional GITEA_ADMIN_* environment variables from docker-compose.yml - Add CLI-based admin user creation via docker exec in deploy-gitea.yml - Add database update to disable must_change_password requirement - Fix runner token API call to use GET instead of POST Runner Setup Fixes: - Change runner gitea_instance to http://localhost:3000 (was failing with public URL) - Fix registration to work from same host as Gitea Domain Migration: - Change domain from gitea.poll-streams.com to git.poll-streams.com - Update DNS, docker-compose, nginx configs, ansible inventory, and SSL setup - Enables fresh SSL certificate (avoids Let's Encrypt rate limit) All changes enable zero-to-one deployment: make full-destroy && make full-deploy
20 lines
661 B
Plaintext
20 lines
661 B
Plaintext
# This file will be generated automatically by Ansible
|
|
# Do not edit manually - it will be overwritten
|
|
|
|
# Database credentials (from AWS Secrets Manager)
|
|
DB_USER=gitea
|
|
DB_PASSWORD=<generated-from-secrets-manager>
|
|
DB_NAME=gitea
|
|
|
|
# Gitea admin credentials (from AWS Secrets Manager)
|
|
GITEA_ADMIN_USERNAME=<generated-from-secrets-manager>
|
|
GITEA_ADMIN_PASSWORD=<generated-from-secrets-manager>
|
|
GITEA_ADMIN_EMAIL=<generated-from-secrets-manager>
|
|
|
|
# AWS SES SMTP credentials (from AWS Secrets Manager)
|
|
SMTP_HOST=email-smtp.eu-central-1.amazonaws.com
|
|
SMTP_PORT=587
|
|
SMTP_USERNAME=<generated-from-ses>
|
|
SMTP_PASSWORD=<generated-from-ses>
|
|
ALERT_EMAIL=bleep.bloop@gmail.com
|