mirror of
https://github.com/VibedByKaKi/forgejo-11-secure.git
synced 2026-10-17 07:48:04 +02:00
b61f9383df
Keep v11.0.16 current with security fixes that are already in a published upstream release, through v16.0.5 (2026-09-17). BACKPORTS.md records what landed, what was skipped, and the latest tag checked. Publish forgejo-<version>-linux-amd64 from version tags. Co-authored-by: KaKi87 <KaKi87@pm.me>
66 lines
1.6 KiB
INI
66 lines
1.6 KiB
INI
APP_NAME = $APP_NAME
|
|
RUN_MODE = $RUN_MODE
|
|
|
|
[repository]
|
|
ROOT = /data/git/repositories
|
|
|
|
[repository.local]
|
|
LOCAL_COPY_PATH = /data/gitea/tmp/local-repo
|
|
|
|
[repository.upload]
|
|
TEMP_PATH = /data/gitea/uploads
|
|
|
|
[server]
|
|
APP_DATA_PATH = /data/gitea
|
|
DOMAIN = $DOMAIN
|
|
SSH_DOMAIN = $SSH_DOMAIN
|
|
HTTP_PORT = $HTTP_PORT
|
|
ROOT_URL = $ROOT_URL
|
|
DISABLE_SSH = $DISABLE_SSH
|
|
SSH_PORT = $SSH_PORT
|
|
SSH_LISTEN_PORT = $SSH_LISTEN_PORT
|
|
LFS_START_SERVER = $LFS_START_SERVER
|
|
|
|
[database]
|
|
PATH = /data/gitea/gitea.db
|
|
DB_TYPE = $DB_TYPE
|
|
HOST = $DB_HOST
|
|
NAME = $DB_NAME
|
|
USER = $DB_USER
|
|
PASSWD = $DB_PASSWD
|
|
LOG_SQL = false
|
|
|
|
[indexer]
|
|
ISSUE_INDEXER_PATH = /data/gitea/indexers/issues.bleve
|
|
|
|
[session]
|
|
PROVIDER_CONFIG = /data/gitea/sessions
|
|
|
|
[picture]
|
|
AVATAR_UPLOAD_PATH = /data/gitea/avatars
|
|
REPOSITORY_AVATAR_UPLOAD_PATH = /data/gitea/repo-avatars
|
|
|
|
[attachment]
|
|
PATH = /data/gitea/attachments
|
|
|
|
[log]
|
|
MODE = console
|
|
LEVEL = info
|
|
ROOT_PATH = /data/gitea/log
|
|
|
|
[security]
|
|
INSTALL_LOCK = $INSTALL_LOCK
|
|
SECRET_KEY = $SECRET_KEY
|
|
REVERSE_PROXY_LIMIT = 1
|
|
# REVERSE_PROXY_TRUSTED_PROXIES is intentionally unset. Trusting every proxy
|
|
# (the previous default of "*") allows CVE-2026-20896 when reverse-proxy
|
|
# authentication is enabled and the web port is reachable past the proxy.
|
|
# Set FORGEJO__security__REVERSE_PROXY_TRUSTED_PROXIES to the proxy address.
|
|
# Backport of https://codeberg.org/forgejo/forgejo/commit/81a5b0d8403d1bbb01421bb75b70bbfeb59d0c73 (v16.0.0).
|
|
|
|
[service]
|
|
DISABLE_REGISTRATION = $DISABLE_REGISTRATION
|
|
REQUIRE_SIGNIN_VIEW = $REQUIRE_SIGNIN_VIEW
|
|
|
|
[lfs]
|
|
PATH = /data/git/lfs
|