From 7f1c16a3ed5566e1b74569117eff42dbfea9441b Mon Sep 17 00:00:00 2001
From: Derek Crudgington <derek@federated.company>
Date: Fri, 17 Mar 2023 15:07:46 +0000
Subject: [PATCH] Added Gitea and Caddy

---
 lib/caddy.sh      |  82 ++++++++++++++++++++++++++++++++
 lib/gitea.sh      | 117 ++++++++++++++++++++++++++++++++++++++++++++++
 lib/postgresql.sh |   4 ++
 3 files changed, 203 insertions(+)
 create mode 100644 lib/caddy.sh
 create mode 100644 lib/gitea.sh

diff --git a/lib/caddy.sh b/lib/caddy.sh
new file mode 100644
index 0000000..dd9741c
--- /dev/null
+++ b/lib/caddy.sh
@@ -0,0 +1,82 @@
+#!/bin/bash
+#
+# Caddy Service
+
+PATH=$HOME/.docker/cli-plugins:/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+config_caddy() {
+  echo -ne "\n* Configuring /federated/apps/caddy container.."
+  spin &
+  SPINPID=$!
+
+  if [ ! -d "/federated/apps/caddy" ]; then
+    mkdir -p /federated/apps/caddy/data/data
+    mkdir -p /federated/apps/caddy/data/etc/caddy
+  fi
+
+  DOMAIN_ARRAY=(${DOMAIN//./ })
+  DOMAIN_FIRST=${DOMAIN_ARRAY[0]}
+  DOMAIN_LAST=${DOMAIN_ARRAY[1]}
+
+cat > /federated/apps/caddy/docker-compose.yml <<EOF
+version: "3.7"
+
+services:
+  caddy:
+    image: federatedcomputer/caddy:\${IMAGE_VERSION}
+    container_name: www
+    hostname: www.$DOMAIN
+    domainname: $DOMAIN
+    restart: always
+    networks:
+      federated:
+        ipv4_address: 172.99.0.31
+    extra_hosts:
+      - "gitea.$DOMAIN:164.92.112.207"
+    env_file:
+      - ./.env
+    volumes:
+      - ./data/etc/caddy/Caddyfile:/etc/caddy/Caddyfile
+      - ./data/data:/data
+
+networks:
+  federated:
+    external: true
+EOF
+
+cat > /federated/apps/caddy/.env <<EOF
+IMAGE_VERSION="latest"
+VIRTUAL_PROTO=http
+VIRTUAL_PORT=2019
+VIRTUAL_HOST=www.$DOMAIN
+EOF
+chmod 600 /federated/apps/caddy/.env
+
+cat > /federated/apps/caddy/data/etc/caddy/Caddyfile <<EOF
+:2019
+file_server
+root * /srv/blog
+
+route /webhook {
+        webhook {
+            repo https://gitea.$DOMAIN/gitea/hugowebsite
+            type github
+            secret $WEBHOOK_SECRET
+            submodule
+            token $GITEA_TOKEN_1
+            path blog
+            branch master
+        }
+    }
+EOF
+
+kill -9 $SPINPID &> /dev/null
+echo -ne "done."
+}
+start_caddy() {
+  # Start service with command to make sure it's up before proceeding
+  start_service "caddy" "nc -z 172.99.0.31 2019 &> /dev/null"
+
+  kill -9 $SPINPID &> /dev/null
+  echo -ne "done."
+}
diff --git a/lib/gitea.sh b/lib/gitea.sh
new file mode 100644
index 0000000..576cb63
--- /dev/null
+++ b/lib/gitea.sh
@@ -0,0 +1,117 @@
+#!/bin/bash
+#
+# Gitea Service
+
+PATH=$HOME/.docker/cli-plugins:/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+config_gitea() {
+  echo -ne "\n* Configuring /federated/apps/gitea container.."
+  spin &
+  SPINPID=$!
+
+  if [ ! -d "/federated/apps/gitea" ]; then
+    mkdir -p /federated/apps/gitea/data/data
+  fi
+
+  DOMAIN_ARRAY=(${DOMAIN//./ })
+  DOMAIN_FIRST=${DOMAIN_ARRAY[0]}
+  DOMAIN_LAST=${DOMAIN_ARRAY[1]}
+
+cat > /federated/apps/gitea/docker-compose.yml <<EOF
+version: "3.7"
+
+services:
+  gitea:
+    image: gitea/gitea:\${IMAGE_VERSION}
+    container_name: gitea
+    hostname: gitea.$DOMAIN
+    domainname: $DOMAIN
+    restart: always
+    networks:
+      federated:
+        ipv4_address: 172.99.0.30
+    extra_hosts:
+      - "www.$DOMAIN:164.92.112.207"
+    ports:
+      - 22:22
+    env_file:
+      - ./.env
+    volumes:
+      - ./data/data:/data
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+
+networks:
+  federated:
+    external: true
+EOF
+
+cat > /federated/apps/gitea/.env <<EOF
+IMAGE_VERSION="latest"
+VIRTUAL_PROTO=http
+VIRTUAL_PORT=3000
+VIRTUAL_HOST=gitea.$DOMAIN
+USER_UID=1000
+USER_GID=1000
+GITEA__database__DB_TYPE=postgres
+GITEA__database__HOST=postgresql.$DOMAIN:5432
+GITEA__database__NAME=gitea
+GITEA__database__USER=gitea
+GITEA__database__PASSWD=$GITEA_SECRET
+GITEA__security__INSTALL_LOCK=true
+GITEA__server__ROOT_URL=https://gitea.$DOMAIN
+EOF
+chmod 600 /federated/apps/gitea/.env
+
+WEBHOOK_SECRET=$(create_password);
+
+cat > /federated/apps/gitea/data/creategitea.sh <<EOF
+#!/bin/bash
+
+# Get the Gitea API token
+GITEA_TOKEN_2=\`curl -H "Content-Type: application/json" -d '{"name":"gitea2"}' -u gitea:$ADMINPASS http://gitea.$DOMAIN:3000/api/v1/users/gitea/tokens 2>/dev/null | awk -F: '{ print \$4 }' | awk -F\" '{ print \$2 }'\`
+
+# Create the repository hugowebsite
+curl -k -X POST http://gitea.$DOMAIN:3000/api/v1/user/repos -H "content-type: application/json" -H "Authorization: token \$GITEA_TOKEN_2" --data '{"name":"hugowebsite","auto_init":true,"default_branch":"master"}'
+
+# Create the webhook inside the hugowebsite repository
+curl -X 'POST' \
+  'http://gitea.$DOMAIN:3000/api/v1/repos/gitea/hugowebsite/hooks' \
+  -H 'accept: application/json' \
+  -H 'Content-Type: application/json' \
+  -H "Authorization: token \$GITEA_TOKEN_2" \
+  -d '{
+  "active": true,
+  "config": {
+    "content_type": "json",
+    "url": "https://www.$DOMAIN/webhook",
+    "secret": "$WEBHOOK_SECRET"
+  },
+  "events": [
+    "push"
+  ],
+  "type": "gitea"
+}'
+EOF
+chmod +x /federated/apps/gitea/data/creategitea.sh
+ 
+kill -9 $SPINPID &> /dev/null
+echo -ne "done."
+}
+start_gitea() {
+  # Start service with command to make sure it's up before proceeding
+  start_service "gitea" "nc -z 172.99.0.30 3000 &> /dev/null"
+
+  mv /federated/apps/gitea/data/creategitea.sh /federated/apps/gitea/data/data/creategitea.sh
+  docker exec --user 1000 gitea gitea admin user create --admin --username gitea --password $ADMINPASS --email admin@$DOMAIN
+  [ $? -ne 0 ] && fail "Couldn't run gitea user create inside /federated/apps/gitea container"
+
+  docker exec -it gitea /data/creategitea.sh
+  [ $? -ne 0 ] && fail "Couldn't run creategitea.sh inside /federated/apps/gitea container"
+
+  GITEA_TOKEN_1=`docker exec -it gitea curl -H "Content-Type: application/json" -d '{"name":"gitea1"}' -u gitea:$ADMINPASS http://gitea.$DOMAIN:3000/api/v1/users/gitea/tokens 2>/dev/null | awk -F: '{ print $4 }' | awk -F\" '{ print $2 }'`
+  [ $? -ne 0 ] && fail "Couldn't run gitea curl to get token inside /federated/apps/gitea container"
+
+  kill -9 $SPINPID &> /dev/null
+  echo -ne "done."
+}
diff --git a/lib/postgresql.sh b/lib/postgresql.sh
index 7ca244f..1c07b0d 100644
--- a/lib/postgresql.sh
+++ b/lib/postgresql.sh
@@ -79,6 +79,7 @@ LISTMONK_SECRET=$(create_password);
 MATRIX_SECRET=$(create_password);
 BASEROW_SECRET=$(create_password);
 CALCOM_SECRET=$(create_password);
+GITEA_SECRET=$(create_password);
 
 # cat postgresql/data/docker-entrypoint-initdb.d/init.sql
 cat > /federated/apps/postgresql/data/docker-entrypoint-initdb.d/init.sql <<EOF
@@ -100,6 +101,9 @@ GRANT ALL PRIVILEGES ON DATABASE baserow TO baserow;
 CREATE USER calcom WITH PASSWORD '$CALCOM_SECRET';
 CREATE DATABASE calcom;
 GRANT ALL PRIVILEGES ON DATABASE calcom TO calcom;
+CREATE USER gitea WITH PASSWORD '$GITEA_SECRET';
+CREATE DATABASE gitea;
+GRANT ALL PRIVILEGES ON DATABASE gitea TO gitea;
 EOF
  
 kill -9 $SPINPID &> /dev/null