Forgejo

A general rule in Forgejo is that many settings cannot be changed via the web GUI once the installation wizard is completed. However, you can still modify them by directly editing the app.ini file inside the container as described below. As this is a somewhat hacky solution, we recommend deciding whether to allow self-registration before deploying a production instance.

Installation Wizard

When visiting the Forgejo web UI for the first time:

  • Uncheck “Enable update checker” as Ocelot-Cloud handles updates
  • Email settings → check “Enable email notification” if you have an SMTP server configured
  • Administrator Account Settings → fill in the required fields
  • Click “Install Forgejo”

Adapting Configuration After Installation

Open the Forgejo container via terminal and edit the app.ini as desired:

apk add nano
nano /data/gitea/conf/app.ini

Save the app.ini file and restart the app.

SSO / OIDC

TODO to be tested with real domain certificate

  • In Ocelot Cloud, go to OIDC tab and copy the Client ID, Client Secret
  • In gitea:
    • Go to Site Administration → Identity & Access → Authentication Sources → Add Authentication Source
    • Authentication type: OAuth2
    • Authentication name: ocelot
    • OAuth2 Provider: OpenID Connect
    • Paste Client ID and Client Secret from Ocelot Cloud
    • OpenID Connect Auto Discovery URL: https://ocelotcloud.<enter-host>/.well-known/openid-configuration
    • Click ‘Add Authentication Source’