Commit Graph
3 Commits
Author SHA1 Message Date
Ruben Hensen 103aed46ed gitea: mount a CA bundle without the compromised eMudhra roots
Mount patched-ca-bundle (see ca-bundle/) over /etc/ssl/certs so it stops trusting the compromised eMudhra intermediates (https://emudhra.we-have-a-problem.com).
2026-10-22 09:13:01 +02:00
Ruben Hensen 145f4eaac4 gitea: pin to 1.27.3 (CVE-2026-60004, CVE-2026-20896, CVE-2026-27771)
The floating gitea/gitea:1 tag with IfNotPresent pull policy left the
node on a cached 1.26.1 image. Pin the version and let Renovate track it.
2026-09-24 11:40:12 +02:00
Ruben Hensen 20128bcd73 Add gitea at git.rubenhensen.nl
Single-pod sqlite install (simplest path for a home git host). HTTPS-only,
no SSH listener for now. Wired into the Hetzner tunnel like the other
rubenhensen.nl services.

First visitor to git.rubenhensen.nl can register; Gitea auto-promotes the
first user to admin.
2026-05-19 23:19:21 +02:00