Create initial log files for fail2ban

roles/gitea/tasks/main.yml

@@ -81,6 +81,16 @@
     dest: "{{ gitea_root }}/.env"
   notify: restart_gitea
 
+- name: Create Gitea's logging directory
+  file:
+    name: /var/log/gitea
+    state: directory
+
+- name: Create Gitea's initial log file
+  file:
+    name: /var/log/gitea/gitea.log
+    state: touch
+
 - name: Install Gitea's Fail2ban filter
   template:
     src: fail2ban-filter.conf.j2

roles/gitea/templates/docker-compose.yml.j2

@@ -21,6 +21,7 @@ services:
       - GITEA__database__NAME=${gitea_dbname}
       - GITEA__database__USER=${gitea_dbuser}
       - GITEA__database__PASSWD=${gitea_dbpass}
+      - GITEA__security__INSTALL_LOCK=true
       - GITEA__security__REVERSE_PROXY_LIMIT=${gitea_proxy_limit}
       - GITEA__security__REVERSE_PROXY_TRUSTED_PROXIES=${gitea_trusted_proxies}
       - GITEA__service__DISABLE_REGISTRATION=${gitea_disable_registration}