migration

infra/values/gitea-values.yaml

@@ -17,13 +17,17 @@ gitea:
       DOMAIN: git.forteapps.net
       ROOT_URL: https://git.forteapps.net
       SSH_DOMAIN: git.forteapps.net
-      SSH_PORT: 22
+      SSH_PORT: 2222
       LFS_START_SERVER: true
+      ENABLE_GITEA_PAGES: true
 
     service:
       DISABLE_REGISTRATION: false
+      DEFAULT_ALLOW_CREATE_ORGANIZATION: false
       REQUIRE_SIGNIN_VIEW: false
       ALLOW_ONLY_EXTERNAL_REGISTRATION: true
+      ENABLE_BASIC_AUTHENTICATION: true
+      ENABLE_PASSWORD_SIGNIN_FORM: false
 
     openid:
       ENABLE_OPENID_SIGNIN: false
@@ -67,8 +71,8 @@ gitea:
     existingSecret: gitea-credentials
     key: gitea
     autoDiscoverUrl: "https://id.forteapps.net/realms/forte/.well-known/openid-configuration"
-    scopes: "openid email profile"
-    groupClaimName: ""
+    scopes: "openid email profile organization"
+    groupClaimName: "groups"
     adminGroup: ""
     restrictedGroup: ""
   # -- Prometheus metrics (scraped via annotations, no ServiceMonitor CRD needed)
@@ -146,7 +150,7 @@ redis-cluster:
 test:
   enabled: false
 
-# -- SSH service (ClusterIP for now; enable NodePort if SSH access needed)
+# -- SSH service (ClusterIP, exposed externally via Traefik TCP IngressRoute on port 2222)
 service:
   ssh:
     type: ClusterIP