WIP: CORS headers

[ci skip]

.env.sample

@@ -24,6 +24,9 @@ SECRET_DB_ROOT_PASSWORD_VERSION=v1
 SECRET_JWT_SECRET_VERSION=v1 # length=43
 SECRET_SECRET_KEY_VERSION=v1 # length=64
 
+GITEA_CORS_ENABLED=0
+# GITEA_CORS_DOMAIN=https://example.org
+
 # SMTP Mailer
 # COMPOSE_FILE="compose.yml:compose.smtp.yml"
 # GITEA_SMTP_MAILER_ENABLED=1

README.md

@@ -3,16 +3,14 @@
 [![Build Status](https://drone.coopcloud.tech/api/badges/coop-cloud/gitea/status.svg)](https://drone.coopcloud.tech/coop-cloud/gitea)
 
 <!-- metadata -->
-
 - **Category**: Development
-- **Status**: ❷💛
+* **Status**: ❶💚
 - **Image**: [`gitea/gitea`](https://hub.docker.com/gitea/gitea), ❶💚, upstream
 - **Healthcheck**: Yes
-- **Backups**: No
+* **Backups**: Yes
 - **Email**: ?
 - **Tests**: ❷💛
 - **SSO**: ❶💚 (OAuth)
-
 <!-- endmetadata -->
 
 ## Basic usage

abra.sh

@@ -1,2 +1,14 @@
-export APP_INI_VERSION=v7
+export APP_INI_VERSION=v8
 export DOCKER_SETUP_SH_VERSION=v1
+
+abra_backup_app() {
+  _abra_backup_dir "app:/var/lib/gitea"
+}
+
+abra_backup_db() {
+  _abra_backup_mysql "db" "gitea"
+}
+
+abra_backup() {
+  abra_backup_app && abra_backup_db
+}

app.ini.tmpl

@@ -58,3 +58,17 @@ ENABLED         = true
 FILE_EXTENSIONS = .rst
 RENDER_COMMAND  = rst2html
 IS_INPUT_FILE   = false
+
+[picture]
+AVATAR_UPLOAD_PATH = /data/gitea/avatars
+REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
+
+[attachment]
+PATH = /data/gitea/attachments
+
+{{ if eq (env "GITEA_CORS_ENABLED") "1" }}
+[cors]
+ENABLED=true
+SCHEME=https
+ALLOW_DOMAIN={{ env "GITEA_CORS_DOMAIN" }}
+{{ end }}

compose.yml

@@ -30,6 +30,8 @@ services:
       - GITEA_ENABLE_OPENID_SIGNUP
       - GITEA_SMTP_MAILER_ENABLED
       - GITEA_SSH_PORT
+      - GITEA_CORS_ENABLED
+      - GITEA_CORS_DOMAIN
     volumes:
       - data:/var/lib/gitea
       - config:/etc/gitea