Migrate Gitea to rootless Podman / SELinux

- Front git-over-SSH with host sshd and live key lookup
- Build and load custom SELinux policies oci_log and gitea_ssh
This commit is contained in:
2026-09-01 01:42:33 -04:00
parent 601a889172
commit a1ef6e76a5
22 changed files with 463 additions and 129 deletions
+1 -10
View File
@@ -2,17 +2,8 @@
[gitea]
enabled = true
filter = gitea
logpath = /var/log/gitea/gitea.log
logpath = {{ gitea_logs }}/gitea.log
maxretry = 10
findtime = 3600
bantime = 900
action = iptables-allports
[gitea-docker]
enabled = true
filter = gitea
logpath = /var/log/gitea/gitea.log
maxretry = 10
findtime = 3600
bantime = 900
action = iptables-allports[chain="FORWARD"]