Migrate Gitea to rootless Podman / SELinux

- Front git-over-SSH with host sshd and live key lookup
- Build and load custom SELinux policies oci_log and gitea_ssh

roles/gitea/defaults/main.yml

@@ -1,6 +1,6 @@
 # container settings
 gitea_name: gitea
-gitea_sshport: "222"
+gitea_sshport: "2222"
 gitea_webport: "3000"
 gitea_ssh: "127.0.0.1:{{ gitea_sshport }}"
 gitea_web: "127.0.0.1:{{ gitea_webport }}"
@@ -16,7 +16,12 @@ gitea_dbuser: "{{ gitea_name }}"
 
 # proxy settings
 gitea_proxy_limit: "1"
-gitea_trusted_proxies: "172.16.0.0/12"
+gitea_trusted_proxies: "10.89.0.0/16"
 
 # host
-gitea_root: "{{ docker_compose_root }}/{{ gitea_name }}"
+gitea_root: "{{ podman_compose.git.root }}/{{ gitea_name }}"
+gitea_logs: "{{ podman_log_root }}/{{ gitea_name }}"
+gitea_data: /srv/gitea
+gitea_se_level: "s0:c22,c222"
+gitea_uid: 1000
+gitea_oci_uid: "{{ podman_subuid_base['git'] | int + gitea_uid | int - 1 }}"