WIP: CORS headers

.env.sample

@@ -24,6 +24,9 @@ SECRET_DB_ROOT_PASSWORD_VERSION=v1
 SECRET_JWT_SECRET_VERSION=v1 # length=43
 SECRET_SECRET_KEY_VERSION=v1 # length=64
 
+GITEA_CORS_ENABLED=0
+# GITEA_CORS_DOMAIN=https://example.org
+
 # SMTP Mailer
 # COMPOSE_FILE="compose.yml:compose.smtp.yml"
 # GITEA_SMTP_MAILER_ENABLED=1

abra.sh

@@ -1,4 +1,4 @@
-export APP_INI_VERSION=v7
+export APP_INI_VERSION=v8
 export DOCKER_SETUP_SH_VERSION=v1
 
 abra_backup_app() {

app.ini.tmpl

@@ -58,3 +58,17 @@ ENABLED         = true
 FILE_EXTENSIONS = .rst
 RENDER_COMMAND  = rst2html
 IS_INPUT_FILE   = false
+
+[picture]
+AVATAR_UPLOAD_PATH = /data/gitea/avatars
+REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
+
+[attachment]
+PATH = /data/gitea/attachments
+
+{{ if eq (env "GITEA_CORS_ENABLED") "1" }}
+[cors]
+ENABLED=true
+SCHEME=https
+ALLOW_DOMAIN={{ env "GITEA_CORS_DOMAIN" }}
+{{ end }}

compose.yml

@@ -30,6 +30,8 @@ services:
       - GITEA_ENABLE_OPENID_SIGNUP
       - GITEA_SMTP_MAILER_ENABLED
       - GITEA_SSH_PORT
+      - GITEA_CORS_ENABLED
+      - GITEA_CORS_DOMAIN
     volumes:
       - data:/var/lib/gitea
       - config:/etc/gitea