set reasonable defaults for webhook, service login, and api request timeouts/limits

.env.sample

@@ -43,6 +43,16 @@ GITEA_CACHE_ADAPTER=memory
 GITEA_CACHE_HOST=
 GITEA_CACHE_ITEM_TTL=16h
 
+GITEA_LOGIN_MAX_FAILED_ATTEMPTS=5
+GITEA_LOGIN_LOCKOUT_DURATION=1h
+
+GITEA_WEBHOOK_ALLOWED_HOST_LIST=external,loopback
+GITEA_WEBHOOK_DELIVER_TIMEOUT=5
+
+GITEA_API_MAX_RESPONSE_ITEMS=50
+GITEA_API_DEFAULT_PAGING_NUM=20
+GITEA_API_ENABLE_SWAGGER=false
+
 GITEA_REPO_UPLOAD_ENABLED=true
 GITEA_REPO_UPLOAD_ALLOWED_TYPES=*/*
 GITEA_REPO_UPLOAD_MAX_SIZE=50
@@ -111,6 +121,3 @@ GITEA_STORAGE_TYPE=local
 # FORGEJO_METRICS_ENABLED_ISSUE_BY_REPOSITORY=false
 # SECRET_FORGEJO_METRICS_TOKEN_VERSION=v1
 # COMPOSE_FILE="$COMPOSE_FILE:compose.metrics.yml"
-
-# Enable access logs. See Access logs on Traefik.
-#ACCESS_LOGS=true

app.ini.tmpl

@@ -45,6 +45,12 @@ ALLOWED_USER_VISIBILITY_MODES = {{ env "GITEA_ALLOWED_USER_VISIBILITY_MODES" }}
 DEFAULT_ORG_VISIBILITY = {{ env "GITEA_DEFAULT_ORG_VISIBILITY" }}
 REQUIRE_SIGNIN_VIEW = {{ env "GITEA_REQUIRE_SIGNIN_VIEW" }}
 ENABLE_INTERNAL_SIGNIN = {{ env "GITEA_ENABLE_INTERNAL_SIGNIN" }}
+MAX_FAILED_ATTEMPTS = {{ or (env "GITEA_LOGIN_MAX_FAILED_ATTEMPTS") "5" }}
+LOCKOUT_DURATION = {{ or (env "GITEA_LOGIN_LOCKOUT_DURATION") "1h" }}
+
+[webhook]
+ALLOWED_HOST_LIST = {{ or (env "GITEA_WEBHOOK_ALLOWED_HOST_LIST) "external,loopback" }}
+DELIVER_TIMEOUT = {{ or (env "GITEA_WEBHOOK_DELIVER_TIMEOUT) "5" }}
 
 [openid]
 ENABLE_OPENID_SIGNIN = {{ env "GITEA_ENABLE_OPENID_SIGNIN" }}
@@ -154,3 +160,8 @@ ENABLED_ISSUE_BY_LABEL = {{ env "FORGEJO_METRICS_ENABLED_ISSUE_BY_LABEL" }}
 ENABLED_ISSUE_BY_REPOSITORY = {{ env "FORGEJO_METRICS_ENABLED_ISSUE_BY_REPOSITORY" }}
 TOKEN = {{ secret "metrics_token" }}
 {{ end }}
+
+[api]
+MAX_RESPONSE_ITEMS = {{ or (env "GITEA_API_MAX_RESPONSE_ITEMS") "50" }}
+DEFAULT_PAGING_NUM = {{ or (env "GITEA_API_DEFAULT_PAGING_NUM") "20" }}
+ENABLE_SWAGGER = {{ or (env "GITEA_API_ENABLE_SWAGGER") "false" }}

compose.yml

@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: codeberg.org/forgejo/forgejo:15.0.9-rootless
+    image: codeberg.org/forgejo/forgejo:15.0.7-rootless
     configs:
       - source: app_ini
         target: /var/lib/gitea/custom/conf/app.ini
@@ -85,13 +85,12 @@ services:
         - "traefik.tcp.routers.${STACK_NAME}-ssh.entrypoints=gitea-ssh"
         - "traefik.tcp.services.${STACK_NAME}-ssh.loadbalancer.server.port=${GITEA_SSH_PORT}"
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}_cors"
-        - "traefik.http.routers.${STACK_NAME}.observability.accesslogs=${ACCESS_LOGS:-false}"
         - "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolallowmethods=GET,OPTIONS,PUT"
         - "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolallowheaders=content-type,authorization"
         - "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolalloworiginlist=https://${GITEA_CORS_ALLOW_DOMAIN}"
         - "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolmaxage=100"
         - "traefik.http.middlewares.${STACK_NAME}_cors.headers.addvaryheader=true"
-        - coop-cloud.${STACK_NAME}.version=5.6.3+15.0.9-rootless
+        - coop-cloud.${STACK_NAME}.version=5.6.1+15.0.7-rootless
 
 
 networks: