WIP: set reasonable defaults for timeouts/limits #48

Draft
Brooke wants to merge 1 commits from ratelimiting into main
2 changed files with 21 additions and 0 deletions
+10
View File
@@ -43,6 +43,16 @@ GITEA_CACHE_ADAPTER=memory
GITEA_CACHE_HOST=
GITEA_CACHE_ITEM_TTL=16h
GITEA_LOGIN_MAX_FAILED_ATTEMPTS=5
GITEA_LOGIN_LOCKOUT_DURATION=1h
GITEA_WEBHOOK_ALLOWED_HOST_LIST=external,loopback
GITEA_WEBHOOK_DELIVER_TIMEOUT=5
GITEA_API_MAX_RESPONSE_ITEMS=50
GITEA_API_DEFAULT_PAGING_NUM=20
GITEA_API_ENABLE_SWAGGER=false
GITEA_REPO_UPLOAD_ENABLED=true
GITEA_REPO_UPLOAD_ALLOWED_TYPES=*/*
GITEA_REPO_UPLOAD_MAX_SIZE=50
+11
View File
@@ -45,6 +45,12 @@ ALLOWED_USER_VISIBILITY_MODES = {{ env "GITEA_ALLOWED_USER_VISIBILITY_MODES" }}
DEFAULT_ORG_VISIBILITY = {{ env "GITEA_DEFAULT_ORG_VISIBILITY" }}
REQUIRE_SIGNIN_VIEW = {{ env "GITEA_REQUIRE_SIGNIN_VIEW" }}
ENABLE_INTERNAL_SIGNIN = {{ env "GITEA_ENABLE_INTERNAL_SIGNIN" }}
MAX_FAILED_ATTEMPTS = {{ or (env "GITEA_LOGIN_MAX_FAILED_ATTEMPTS") "5" }}
LOCKOUT_DURATION = {{ or (env "GITEA_LOGIN_LOCKOUT_DURATION") "1h" }}
Review

nice! i didn't know this syntax :O

nice! i didn't know this syntax :O
[webhook]
ALLOWED_HOST_LIST = {{ or (env "GITEA_WEBHOOK_ALLOWED_HOST_LIST) "external,loopback" }}
DELIVER_TIMEOUT = {{ or (env "GITEA_WEBHOOK_DELIVER_TIMEOUT) "5" }}
[openid]
ENABLE_OPENID_SIGNIN = {{ env "GITEA_ENABLE_OPENID_SIGNIN" }}
@@ -154,3 +160,8 @@ ENABLED_ISSUE_BY_LABEL = {{ env "FORGEJO_METRICS_ENABLED_ISSUE_BY_LABEL" }}
ENABLED_ISSUE_BY_REPOSITORY = {{ env "FORGEJO_METRICS_ENABLED_ISSUE_BY_REPOSITORY" }}
TOKEN = {{ secret "metrics_token" }}
{{ end }}
[api]
MAX_RESPONSE_ITEMS = {{ or (env "GITEA_API_MAX_RESPONSE_ITEMS") "50" }}
DEFAULT_PAGING_NUM = {{ or (env "GITEA_API_DEFAULT_PAGING_NUM") "20" }}
ENABLE_SWAGGER = {{ or (env "GITEA_API_ENABLE_SWAGGER") "false" }}
Review

is swagger enabled by default? could it affect api clients?

is swagger enabled by default? could it affect api clients?
Review

It is enabled by default but It should not have any effect on actual usage of the api.

It is enabled by default but It should not have any effect on actual usage of the api.