mucas-central/homelab/applications/gitea/README.md

Gitea

Set up database

• Create database user called gitea incl. password
• Create database called gitea in Postgres
• Define new user as owner of the database
• Store database credentials in 1Password

Set up non-root user for container

We are providing a non-root user to the container to limit the attack surface for privilege escalations. In order for this to work in our setup, please make sure to check if you have a user called gitea-user & group called gitea-group set up.

1. Check if user gitea-user & group gitea-group exist and if the UID/GID is 1003

cat /etc/passwd | grep gitea-user
cat /etc/group | grep gitea-group

In case user/group exists but the UID/GID is not 1003, please adjust it via

sudo usermod -u 1003 gitea-user
sudo groupmod -g 1003 gitea-group

In case user/group doesn't exist at all, please create the user & group incl. the right UID/GID by running

sudo groupadd -g 1003 gitea-group
sudo useradd -g gitea-group -u 1003 gitea-user