set --work-path config parameter

.github/dependabot.yml

@@ -0,0 +1,9 @@
+---
+# See https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"

.github/workflows/ansible-linting-check.yml

@@ -2,27 +2,22 @@
 name: Ansible Lint check
 
 # yamllint disable-line rule:truthy
-on:
-  push:
-    branches: '*'
-  pull_request:
-    branches: '*'
-  schedule:
-    - cron: '42 6 * */1 *'
+on: [push, pull_request]
 
 jobs:
   build:
-
+    name: Ansible Lint
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v2
+      - name: 'checkout git repo'
+        uses: actions/checkout@v3
+        with:
+          lfs: true
+          submodules: false
+          fetch-depth: 0
 
-      - name: Lint Ansible Playbook
-        uses: ansible/ansible-lint-action@master
+      - name: 'Lint Ansible Playbook'
+        uses: ansible/ansible-lint-action@v6
         with:
-          targets: "."
-          # [required]
-          # Paths to ansible files (i.e., playbooks, tasks, handlers etc..)
-          args: ""
-          # [optional]
+          path: "."

.github/workflows/galaxy.yml

@@ -12,9 +12,11 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - name: checkout
-        uses: actions/checkout@v2
-      - name: galaxy
-        uses: robertdebock/[email protected]
+      - name: 'checkout git repo'
+        uses: actions/checkout@v3
+
+      - name: 'release on galaxy'
+        uses: robertdebock/[email protected]
         with:
           galaxy_api_key: ${{ secrets.galaxy_api_key }}
+          git_branch: 'main'

.github/workflows/yamllint.yaml

@@ -7,18 +7,17 @@ on:
     branches: '*'
   pull_request:
     branches: '*'
-  schedule:
-    - cron: '23 6 * */1 *'
 
 jobs:
   yamllint:
     name: 'Yamllint'
     runs-on: ubuntu-latest
     steps:
-      - name: 'Checkout'
-        uses: actions/checkout@master
+      - name: 'checkout git repo'
+        uses: actions/checkout@v3
+
       - name: 'Yamllint'
-        uses: karancode/yamllint-github-action@master
+        uses: karancode/yamllint-github-action@v2.1.1
         with:
           yamllint_file_or_dir: '.'
           yamllint_config_filepath: './.yamllint'

.yamllint

@@ -2,7 +2,7 @@
 extends: default
 
 rules:
-  # 170 chars should be enough, but don't fail if a line is longer
+  # 190 chars should be enough, but don't fail if a line is longer
   line-length:
-    max: 170
+    max: 190
     level: warning

defaults/main.yml

@@ -1,17 +1,26 @@
 ---
+# Choose between https://forgejo.org/ and https://gitea.io/
+gitea_fork: 'gitea'  # 'gitea' and 'forgejo' are valid options
+
 # gitea version
 # Use 'latest' to auto-update; upgrading past role version may lead to errors.
-gitea_version: '1.15.3'
+gitea_version: 'latest'
 gitea_version_check: true
 gitea_gpg_key: '7C9E68152594688862D62AF62D9AE806EC1592E2'
+gitea_forgejo_gpg_key: 'EB114F5E6C0DC2BCDD183550A4B61A2DC5923710'
 gitea_gpg_server: 'hkps://keys.openpgp.org'
 gitea_backup_on_upgrade: false
 gitea_backup_location: "{{ gitea_home }}/backups/"
 submodules_versioncheck: false
 
 # gitea in the linux world
 gitea_group: 'gitea'
+# gitea_groups: []  # Optional a list of groups user gitea will be added to
 gitea_home: '/var/lib/gitea'
+gitea_user_home: '{{ gitea_home }}'
+gitea_executable_path: '/usr/local/bin/gitea'
+gitea_forgejo_executable_path: '/usr/local/bin/forgejo'
+gitea_configuration_path: '/etc/gitea'
 gitea_shell: '/bin/false'
 gitea_systemd_cap_net_bind_service: false
 
@@ -24,38 +33,91 @@ gitea_fqdn: 'localhost'
 
 # Repository (repository)
 # -> https://docs.gitea.io/en-us/config-cheat-sheet/#repository-repository
-gitea_repository_root: "{{ gitea_home }}/repos"
-gitea_force_private: false
-gitea_user_repo_limit: '-1'
-gitea_disable_http_git: false
 gitea_default_branch: 'main'
 gitea_default_private: 'last'
+gitea_default_repo_units: 'repo.code,repo.releases,repo.issues,repo.pulls,repo.wiki,repo.projects'
+gitea_disabled_repo_units: ''
+gitea_disable_http_git: false
+gitea_disable_stars: false
+gitea_enable_push_create_org: false
+gitea_enable_push_create_user: false
+gitea_force_private: false
+gitea_user_repo_limit: '-1'
+gitea_repository_root: "{{ gitea_home }}/repos"
 gitea_repository_extra_config: ''
+
+# Repository - Upload (repository.upload)
+# -> https://docs.gitea.io/en-us/administration/config-cheat-sheet/#repository---upload-repositoryupload
+gitea_repository_upload_enabled: true
+gitea_repository_upload_max_size: 4
 gitea_repository_upload_extra_config: ''
 
+# Repository - Signing (repository.signing)
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#repository---signing-repositorysigning
+gitea_enable_repo_signing_options: false
+gitea_repo_signing_key: 'default'
+gitea_repo_signing_name: ''
+gitea_repo_signing_email: ''
+gitea_repo_initial_commit: 'always'
+gitea_repo_default_trust_model: 'collaborator'
+gitea_repo_wiki: 'never'
+gitea_repo_crud_actions: 'pubkey, twofa, parentsigned'
+gitea_repo_merges: ' pubkey, twofa, basesigned, commitssigned'
+gitea_enable_repo_signing_extra: ''
+
+# CORS (cors)
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#cors-cors
+gitea_enable_cors: false
+gitea_cors_scheme: 'http'
+gitea_cors_allow_domain: '*'
+gitea_cors_allow_subdomain: false
+gitea_cors_methods: 'GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS'
+gitea_cors_max_age: '10m'
+gitea_cors_allow_credentials: false
+gitea_cors_headers: 'Content-Type,User-Agent'
+gitea_cors_x_frame_options: 'SAMEORIGIN'
+gitea_cors_extra: ''
+
 # UI (ui)
 # -> https://docs.gitea.io/en-us/config-cheat-sheet/#ui-ui
 gitea_show_user_email: false
-gitea_theme_default: 'gitea'
-gitea_themes: 'gitea,arc-green'
+gitea_theme_default: 'auto'
+gitea_themes: 'auto,gitea,arc-green'
 gitea_ui_extra_config: ''
 
+# UI - Metadata (ui.meta)
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#ui---metadata-uimeta
+gitea_ui_author: 'Gitea - Git with a cup of tea'
+gitea_ui_description: 'Gitea (Git with a cup of tea) is a painless self-hosted Git service written in Go:'
+gitea_ui_keywords: 'go,git,self-hosted,gitea,forgejo'
+gitea_ui_meta_extra_config: ''
+
 # Server (server)
 # -> https://docs.gitea.io/en-us/config-cheat-sheet/#server-server
 gitea_protocol: 'http'
 gitea_http_domain: "{{ gitea_fqdn }}"
 gitea_root_url: "http://{{ gitea_fqdn }}:3000"
 gitea_http_listen: '127.0.0.1'
 gitea_http_port: '3000'
-# gitea_http_letsencrypt_mail: '[email protected]'
 gitea_start_ssh: true
 gitea_ssh_domain: "{{ gitea_fqdn }}"
 gitea_ssh_port: '2222'
 gitea_ssh_listen: '0.0.0.0'
 gitea_offline_mode: true
+gitea_landing_page: 'home'
 gitea_lfs_server_enabled: false
-gitea_lfs_content_path: "{{ gitea_home }}/data/lfs"
 gitea_lfs_jwt_secret: ''
+gitea_redirect_other_port: false
+gitea_port_to_redirect: '80'
+gitea_enable_tls_certs: false
+gitea_tls_cert_file: 'https/cert.pem'
+gitea_tls_key_file: 'https/key.pem'
+gitea_enable_acme: false
+gitea_acme_url: ''
+gitea_acme_accepttos: false
+gitea_acme_directory: 'https'
+gitea_acme_email: ''
+gitea_acme_ca_root: ''
 gitea_server_extra_config: ''
 
 # Database (database)
@@ -78,12 +140,14 @@ gitea_repo_indexer_exclude: ''
 gitea_repo_exclude_vendored: true
 gitea_repo_indexer_max_file_size: '1048576'
 gitea_indexer_extra_config: ''
+gitea_queue_issue_indexer_extra_config: ''
 
 # Security (security)
 # -> https://docs.gitea.io/en-us/config-cheat-sheet/#security-security
 gitea_secret_key: ''
-gitea_internal_token: ''
 gitea_disable_git_hooks: true
+gitea_disable_webhooks: false
+gitea_internal_token: ''
 gitea_password_check_pwn: false
 gitea_security_extra_config: ''
 
@@ -103,14 +167,19 @@ gitea_service_extra_config: ''
 # Mailer [mailer]
 # -> https://docs.gitea.io/en-us/config-cheat-sheet/#mailer-mailer
 gitea_mailer_enabled: false
-gitea_mailer_host: 'localhost:25'
-gitea_mailer_skip_verify: false
-gitea_mailer_tls_enabled: true
-gitea_mailer_from: "noreply@{{ gitea_http_domain }}"
+gitea_mailer_protocol: 'dummy'
+gitea_mailer_smtp_addr: ''
+gitea_mailer_smtp_port: ''
+gitea_mailer_use_client_cert: false
+gitea_mailer_client_cert_file: ''
+gitea_mailer_client_key_file: ''
+gitea_mailer_force_trust_server_cert: false
 gitea_mailer_user: ''
 gitea_mailer_password: ''
+gitea_mailer_enable_helo: true
+gitea_mailer_from: "noreply@{{ gitea_http_domain }}"
 gitea_subject_prefix: ''
-gitea_mailer_type: smtp
+gitea_mailer_send_as_plaintext: false
 gitea_mailer_extra_config: ''
 
 # Session (session)
@@ -119,27 +188,65 @@ gitea_session_provider: 'file'
 gitea_session_extra_config: ''
 
 # Picture (picture)
-gitea_disable_gravatar: true
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#picture-picture
 gitea_picture_extra_config: ''
 
 # Issue and pull request attachments (attachment)
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#issue-and-pull-request-attachments-attachment
 gitea_attachment_enabled: true
+gitea_attachment_types: '.csv,.docx,.fodg,.fodp,.fods,.fodt,.gif,.gz,.jpeg,.jpg,.log,.md,.mov,.mp4,.odf,.odg,.odp,.ods,.odt,.patch,.pdf,.png,.pptx,.svg,.tgz,.txt,.webm,.xls,.xlsx,.zip'
+gitea_attachment_max_size: 4
 gitea_attachment_extra_config: ''
 
 # Log (log)
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#log-log
 gitea_log_systemd: false
 gitea_log_level: 'Warn'
 gitea_log_extra_config: ''
 
 # Metrics (metrics)
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#metrics-metrics
 gitea_metrics_enabled: false
 gitea_metrics_token: ''
+gitea_metrics_extra: ''
 
 # OAuth2 (oauth2)
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#oauth2-oauth2
 gitea_oauth2_enabled: true
 gitea_oauth2_jwt_secret: ''
 gitea_oauth2_extra_config: ''
 
+# Federation (federation)
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#federation-federation
+gitea_federation_enabled: false
+gitea_federation_share_user_stats: false
+gitea_federation_extra: ''
+
+# Packages (packages)
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#packages-packages
+gitea_packages_enabled: true
+gitea_packages_extra: ''
+
+# LFS (lfs)
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#lfs-lfs
+gitea_lfs_storage_type: 'local'
+gitea_lfs_serve_direct: false
+gitea_lfs_content_path: "{{ gitea_home }}/data/lfs"
+gitea_lfs_extra: ''
+
+# Actions (actions)
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#actions-actions
+gitea_actions_enabled: false
+gitea_actions_default_actions_url: "https://gitea.com"
+gitea_actions_extra: ''
+
+# Other (other)
+# -> https://docs.gitea.io/en-us/config-cheat-sheet/#other-other
+gitea_other_show_footer_version: true
+gitea_other_show_footer_template_load_time: true
+gitea_other_enable_sitemap: true
+gitea_other_enable_feed: true
+
 # additional gitea config
 gitea_extra_config: ""
 

handlers/main.yml

@@ -1,18 +1,18 @@
 ---
 - name: "Restart gitea"
   become: true
-  service:
+  ansible.builtin.service:
     name: gitea
     state: restarted
   when: ansible_service_mgr == "systemd"
 
 - name: "Reload systemd"
   become: true
-  systemd:
+  ansible.builtin.systemd:
     daemon_reload: true
   when: ansible_service_mgr == "systemd"
 
-- name: "systemctl restart fail2ban"
+- name: "Systemctl restart fail2ban"
   become: true
   ansible.builtin.systemd:
     name: fail2ban