a14413e886
Bind Gitea on all interfaces for cast02/03 proxy, fix stale 2FA lab-seed approve flow, add /v0/downloads/ and GITEA_UPSTREAM_HOST, and guard nginx configure against empty templates. Co-authored-by: Cursor <cursoragent@cursor.com>
Gitea on cluster0 (cast01 primary)
Browse UI (after FE ac-fe.conf + DNS):
https://acl0.f0xx.org/app/androidcast_project/git/
Direct on cast01 (debug): http://127.0.0.1:3000/ (nginx public path strips /app/.../git/).
This step (basic config only)
- Prod
app.inilayout copied and adapted inapp.ini.template - Paths under
/var/lib/gitea(repos, LFS, logs) - SQLite DB at
/var/lib/gitea/gitea.db(GITEA_DB_TYPE=sqlite3incluster.env; optionalmysqlfor prod-like) - Nginx on cast01 proxies
/app/androidcast_project/git/→127.0.0.1:3000 - No repo mirrors / org migration yet — run later via scripts under
lab-seeds/backend/scripts/gitea/(same as prod BE)
Deploy
# On cast01 after populate app phase (or standalone):
sudo sh /shared/cluster/scripts/deploy-gitea.sh
sudo sh /shared/cluster/scripts/configure-nginx.sh
sudo rc-service gitea status
curl -sS -o /dev/null -w 'gitea_direct=%{http_code}\n' http://127.0.0.1:3000/
curl -sS -o /dev/null -w 'gitea_nginx=%{http_code}\n' \
http://127.0.0.1/app/androidcast_project/git/
Enable in cluster.env: GITEA_ENABLE=1 (set by default in tree).
Lab admin login
| Field | Value |
|---|---|
| User | admin (override GITEA_ADMIN_USER) |
| Password | [gitea_admin] in credentials.txt (falls back to mariadb_app password) |
Create org AndroidCast in UI before mirror scripts, or run gitea_migrate_org_setup.sh later.
Later: mirror ac/* repos
When ready (not part of this step):
sudo sh /shared/cluster/scripts/mirror-gitea-ac-org.sh
Uses gitea/ac-repos.list and lab-seeds/backend/scripts/gitea/* (API pull mirrors, org ac).
Lab status (cluster0): all mirrors in gitea/ac-repos.list — run sudo sh /shared/cluster/scripts/verify-gitea-mirrors.sh on cast01.
See lab-seeds/backend/scripts/gitea/README.md for full mirror/protect flows.
Integration map
| Layer | Config |
|---|---|
| cast01 BE nginx | nginx/apps-port80.conf → :3000 |
| Gentoo FE lab vhost | ac-platform-edge/fe/ac-fe.conf → cast01:80 (git via BE nginx) |
| Git server (canonical) | git://f0xx.org/ac/* — unchanged; Gitea is browse mirror only |
Secrets generated once in /var/lib/gitea/.lab-secrets.env on cast01 (not in git).
Mirror API token: /var/lib/gitea/.mirror-admin-token — recovery in ac-docs/docs/SECRETS_AND_RECOVERY.md.
Note: first start after fresh DB can take 30–90s (SQLite schema migration). deploy-gitea.sh waits up to 6 minutes.