apps: remove gitea because forgejo is fine

apps/code/gitea-kustomization.yaml

-apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
-kind: Kustomization
-metadata:
-  name: gitea
-  namespace: flux-system
-spec:
-  interval: 10m
-  retryInterval: 2m
-  wait: true
-  timeout: 3m
-  dependsOn:
-    - name: single-sign-on
-  sourceRef:
-    kind: GitRepository
-    name: stackspout
-  path: ./apps/code
-  prune: true
-  postBuild:
-    substituteFrom:
-      #- kind: Secret
-      #  name: stackspin-gitea-variables
-      - kind: Secret
-        name: stackspin-gitea-oauth-variables
-      - kind: Secret
-        name: stackspin-cluster-variables

apps/code/gitea-secrets/gitea-oauth-secret.yaml

----
-apiVersion: secretgenerator.mittwald.de/v1alpha1
-kind: StringSecret
-metadata:
-  name: stackspin-gitea-oauth-variables
-  namespace: flux-system
-spec:
-  data:
-    client_id: gitea
-  fields:
-  - fieldName: client_secret
-    length: "32"

apps/code/gitea-secrets/gitea-variables.yaml

----
-apiVersion: secretgenerator.mittwald.de/v1alpha1
-kind: StringSecret
-metadata:
-  name: stackspin-gitea-variables
-  namespace: flux-system
-spec:
-  fields:
-  - fieldName: gitea_mariadb_password
-  - fieldName: gitea_mariadb_root_password
-  - fieldName: gitea_session_secret

apps/code/gitea/gitea-data-pvc.yaml

-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: gitea-data
-  namespace: stackspout
-  labels:
-    stackspin.net/backupSet: "gitea"
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 2Gi
-  storageClassName: local-path

apps/code/gitea/gitea-oauth-client.yaml

-apiVersion: hydra.ory.sh/v1alpha1
-kind: OAuth2Client
-metadata:
-  name: gitea-oauth-client
-  # Has to live in the same namespace as the stackspin-*-oauth-variables secret
-  namespace: flux-system
-spec:
-  # TODO copied from wekan: https://github.com/wekan/wekan/wiki/Keycloak
-  grantTypes:
-    - authorization_code
-    - refresh_token
-    - client_credentials
-    - implicit
-  responseTypes:
-    - id_token
-    - code
-  scope: "openid profile email stackspin_roles"
-  secretName: stackspin-gitea-oauth-variables
-  redirectUris:
-    - https://code.${domain}/user/oauth2/Stackspin/callback
-  tokenEndpointAuthMethod: client_secret_post

apps/code/gitea/gitea-postgres-pvc.yaml

-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: gitea-postgres
-  namespace: stackspout
-  labels:
-    stackspin.net/backupSet: "gitea"
-spec:
-  accessModes:
-    - ReadWriteOnce
-  volumeMode: Filesystem
-  resources:
-    requests:
-      storage: 2Gi
-  storageClassName: local-path

apps/code/gitea/gitea-release.yaml

-apiVersion: helm.toolkit.fluxcd.io/v2beta1
-kind: HelmRelease
-metadata:
-  name: gitea
-  namespace: stackspout
-spec:
-  releaseName: gitea
-  chart:
-    spec:
-      # https://gitea.com/gitea/helm-chart/tags
-      chart: gitea
-      version: 6.0.5
-      sourceRef:
-        kind: HelmRepository
-        name: gitea
-        namespace: flux-system
-  interval: 5m
-  valuesFrom:
-    - kind: ConfigMap
-      name: stackspin-gitea-values
-      optional: false
-    # Allow overriding values by ConfigMap or Secret
-    - kind: ConfigMap
-      name: stackspin-gitea-override
-      optional: true
-    - kind: Secret
-      name: stackspin-gitea-override
-      optional: true

apps/code/gitea/gitea-values-configmap.yaml

-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: stackspin-gitea-values
-  namespace: stackspout
-data:
-  values.yaml: |
-    ingress:
-      enabled: true
-      annotations:
-        kubernetes.io/tls-acme: "true"
-        nginx.ingress.kubernetes.io/proxy-body-size: "50m"
-      hosts:
-        - host: "code.${domain}"
-          paths:
-             - path: /
-               pathType: Prefix
-      tls:
-        - secretName: gitea-tls
-          hosts:
-            - "code.${domain}"
-    gitea:
-      # https://gitea.com/gitea/helm-chart/src/branch/main#oauth2-settings
-      oauth:
-        - name: Stackspin
-          provider: "openidConnect"
-          key: "${client_id}"
-          secret: "${client_secret}"
-          autoDiscoverUrl: "https://${hydra_domain}/.well-known/openid-configuration"
-          iconUrl: "https://dashboard.${domain}/favicon-32x32.png"
-      # https://docs.gitea.io/en-us/config-cheat-sheet
-      config:
-        repository:
-          DEFAULT_PUSH_CREATE_PRIVATE: false
-          ENABLE_PUSH_CREATE_USER: true
-          ENABLE_PUSH_CREATE_ORG: true
-        server:
-          ROOT_URL: "https://code.${domain}"
-          LANDING_PAGE: login
-        openid:
-          ENABLE_OPENID_SIGNUP: true
-        service:
-          DISABLE_REGISTRATION: false
-          ALLOW_ONLY_EXTERNAL_REGISTRATION: true
-        log:
-          LEVEL: "Trace"
-    persistence:
-      enabled: true
-      existingClaim: gitea-data
-    postgresql:
-      persistence:
-        enabled: true
-        existingClaim: gitea-postgres
-    service:
-      ssh:
-        hostPort: 22

apps/code/gitea/ingress-gitea.yaml

-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: tcp-services
-  namespace: stackspout
-data:
-  22: "gitea:22"

apps/code/gitea/kustomization.yaml

-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - gitea-release.yaml
-  - gitea-values-configmap.yaml
-  - metallb-gitea.yaml
-  - gitea-oauth-client.yaml
-  - gitea-data-pvc.yaml
-  - gitea-postgres-pvc.yaml

apps/code/gitea/metallb-gitea.yaml

-# https://metallb.org/usage/
-apiVersion: v1
-kind: Service
-metadata:
-  name: gitea-ssh
-  namespace: stackspout
-  annotations:
-    metallb.universe.tf/allow-shared-ip: "share-ipv4"
-spec:
-  type: LoadBalancer
-  loadBalancerIP: "${ip_address}"
-  ports:
-    - name: ssh
-      protocol: TCP
-      port: 22
-      targetPort: 22
-  selector:
-    app: gitea

apps/code/kustomization.yaml

-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - gitea-kustomization.yaml

apps/forge/forgejo/forgejo-values-configmap.yaml

@@ -140,4 +140,4 @@ data:
       type: 'RollingUpdate'
       rollingUpdate:
         maxSurge: '25%'
-        maxUnavailable: '25%'
+        maxUnavailable: '100%'

apps/video/peertube/peertube-values-configmap.yaml

@@ -5,6 +5,7 @@ metadata:
   namespace: stackspout
 data:
   values.yaml: |
+    # https://git.lecygnenoir.info/LecygneNoir/peertube-helm/src/branch/master/values.yaml
     commonLabels:
       stackspin.net/backupSet: "peertube"
     podLabels:

infrastructure/sources/gitea.yaml

-apiVersion: source.toolkit.fluxcd.io/v1beta2
-kind: HelmRepository
-metadata:
-  name: gitea
-  namespace: flux-system
-spec:
-  interval: 60m
-  url: https://dl.gitea.io/charts/