Initial own-git docs, configs, scripts, and hardening pack

gitea/app.ini.example

@@ -0,0 +1,39 @@
+APP_NAME = Gitea
+RUN_MODE = prod
+RUN_USER = git
+
+[server]
+DOMAIN           = git.papatramp.ru
+SSH_DOMAIN       = git.papatramp.ru
+HTTP_PORT        = 3000
+ROOT_URL         = https://git.papatramp.ru/
+DISABLE_SSH      = false
+START_SSH_SERVER = true
+SSH_PORT         = 2222
+SSH_LISTEN_PORT  = 2222
+PROTOCOL         = http
+
+[service]
+DISABLE_REGISTRATION              = true
+REQUIRE_SIGNIN_VIEW               = false
+REGISTER_EMAIL_CONFIRM            = false
+ENABLE_NOTIFY_MAIL                = false
+ALLOW_ONLY_EXTERNAL_REGISTRATION  = false
+
+[security]
+INSTALL_LOCK = true
+SECRET_KEY = CHANGE_ME_LONG_RANDOM_SECRET
+INTERNAL_TOKEN = CHANGE_ME_LONG_RANDOM_TOKEN
+PASSWORD_HASH_ALGO = argon2
+
+[database]
+DB_TYPE  = sqlite3
+PATH     = /data/gitea/gitea.db
+
+[repository]
+ROOT = /data/git/repositories
+
+[log]
+MODE      = console
+LEVEL     = Info
+ROOT_PATH = /data/gitea/log

gitea/docker-compose.yml

@@ -0,0 +1,16 @@
+services:
+  gitea:
+    image: gitea/gitea:latest
+    container_name: gitea
+    restart: unless-stopped
+    environment:
+      - USER_UID=1000
+      - USER_GID=1000
+      - TZ=Europe/Moscow
+    ports:
+      - "3000:3000"
+      - "2222:2222"
+    volumes:
+      - /opt/gitea/data:/data
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro