From fabd33037add09fdbc7aaa8c699d265fe7683dfc Mon Sep 17 00:00:00 2001
From: 3wc <3wc@doesthisthing.work>
Date: Sun, 21 Nov 2021 22:13:32 +0200
Subject: [PATCH] WIP: CORS headers

---
 .env.sample  |  3 +++
 abra.sh      |  2 +-
 app.ini.tmpl | 14 ++++++++++++++
 compose.yml  |  2 ++
 4 files changed, 20 insertions(+), 1 deletion(-)

diff --git a/.env.sample b/.env.sample
index b188455..d88a5b4 100644
--- a/.env.sample
+++ b/.env.sample
@@ -24,6 +24,9 @@ SECRET_DB_ROOT_PASSWORD_VERSION=v1
 SECRET_JWT_SECRET_VERSION=v1 # length=43
 SECRET_SECRET_KEY_VERSION=v1 # length=64
 
+GITEA_CORS_ENABLED=0
+# GITEA_CORS_DOMAIN=https://example.org
+
 # SMTP Mailer
 # COMPOSE_FILE="compose.yml:compose.smtp.yml"
 # GITEA_SMTP_MAILER_ENABLED=1
diff --git a/abra.sh b/abra.sh
index 8b96d81..29b9c29 100644
--- a/abra.sh
+++ b/abra.sh
@@ -1,4 +1,4 @@
-export APP_INI_VERSION=v7
+export APP_INI_VERSION=v8
 export DOCKER_SETUP_SH_VERSION=v1
 
 abra_backup_app() {
diff --git a/app.ini.tmpl b/app.ini.tmpl
index c3a80c9..46dcf2f 100644
--- a/app.ini.tmpl
+++ b/app.ini.tmpl
@@ -58,3 +58,17 @@ ENABLED         = true
 FILE_EXTENSIONS = .rst
 RENDER_COMMAND  = rst2html
 IS_INPUT_FILE   = false
+
+[picture]
+AVATAR_UPLOAD_PATH = /data/gitea/avatars
+REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
+
+[attachment]
+PATH = /data/gitea/attachments
+
+{{ if eq (env "GITEA_CORS_ENABLED") "1" }}
+[cors]
+ENABLED=true
+SCHEME=https
+ALLOW_DOMAIN={{ env "GITEA_CORS_DOMAIN" }}
+{{ end }}
diff --git a/compose.yml b/compose.yml
index fd7e02e..a5cb075 100644
--- a/compose.yml
+++ b/compose.yml
@@ -30,6 +30,8 @@ services:
       - GITEA_ENABLE_OPENID_SIGNUP
       - GITEA_SMTP_MAILER_ENABLED
       - GITEA_SSH_PORT
+      - GITEA_CORS_ENABLED
+      - GITEA_CORS_DOMAIN
     volumes:
       - data:/var/lib/gitea
       - config:/etc/gitea