make env ephemeral, update gitea

.env

@@ -9,8 +9,8 @@ MARIADB_INNODB_BUFFER_POOL_SIZE=512M
 IMAGE_TAG=local
 EXTERNAL_DATA_BOOL=false
 
-# Gitea app.ini overrides
-GITEA__DEFAULT__RUN_MODE=dev
+# Gitea app.ini env settings that are included in the docker-compose so they can be overridden via cli env vars
+GITEA____RUN_MODE=dev
 GITEA__server__DOMAIN=localhost:3000
 GITEA__server__SSH_DOMAIN=localhost
 GITEA__server__SSH_PORT=222
@@ -27,5 +27,138 @@ GITEA__mailer__SMTP_PORT=587
 GITEA__mailer__USER=user
 GITEA__mailer__PASSWD=password
 GITEA__mailer__FROM=[email protected]
+GITEA__service__CAPTCHA_TYPE=image
+GITEA__service__CF_TURNSTILE_SECRET=""
+GITEA__service__CF_TURNSTILE_SITEKEY=""
 # placeholder value to prevent app.ini changes
 GITEA__oauth2__JWT_SECRET=aly-OATZJDzlFTeDU8j6sD1r9ykUSBWo7Mzyem01Iko
+
+# [default]
+GITEA____APP_NAME="Wycliffe Associates Content Service"
+GITEA____WORK_PATH=/var/lib/gitea
+
+# [repository]
+GITEA__repository__ROOT = /var/lib/gitea/git/repositories
+GITEA__repository__DEFAULT_PRIVATE = public
+GITEA__repository__MAX_CREATION_LIMIT = 2000
+GITEA__repository__DISABLE_HTTP_GIT = false
+
+# [repository.upload]
+GITEA__repository_0X2E_upload__ENABLED = true
+GITEA__repository_0X2E_upload__TEMP_PATH = /var/lib/gitea/data/tmp/uploads
+GITEA__repository_0X2E_upload__ALLOWED_TYPES = image/jpeg|image/png|image/gif|application/pdf|.txt|text/plain|text/csv|.usfm|text/usfm|text/x-usfm|text/usfm3|.md|.markdown|text/markdown|text/x-markdown|.yaml|.yml|text/x-yaml|application/x-yaml|text/yaml|text/vnd.yaml
+GITEA__repository_0X2E_upload__FILE_MAX_SIZE = 10
+GITEA__repository_0X2E_upload__MAX_FILES = 10
+
+# [cors]
+GITEA__cors__ENABLED = true
+GITEA__cors__ALLOW_DOMAIN = *
+
+# [ui]
+GITEA__ui__SHOW_USER_EMAIL = false
+GITEA__ui__DEFAULT_THEME = gitea
+GITEA__ui__THEMES = gitea
+
+# [ui.meta]
+GITEA__ui_0X2E_meta__AUTHOR = Wycliffe Associates and many volunteers
+GITEA__ui_0X2E_meta__DESCRIPTION = An online repository for open-licensed Biblical content in any language
+GITEA__ui_0X2E_meta__KEYWORDS = bible,translation
+
+# [server]
+GITEA__server__APP_DATA_PATH = /var/lib/gitea/data
+GITEA__server__PROTOCOL = http
+GITEA__server__ROOT_URL = https://%(DOMAIN)s/
+GITEA__server__HTTP_ADDR = 0.0.0.0
+GITEA__server__HTTP_PORT = 3000
+GITEA__server__REDIRECT_OTHER_PORT = false
+GITEA__server__PORT_TO_REDIRECT = 80
+GITEA__server__UNIX_SOCKET_PERMISSION = 666
+GITEA__server__DISABLE_SSH = false
+GITEA__server__START_SSH_SERVER = true
+GITEA__server__BUILTIN_SSH_SERVER_USER = git
+GITEA__server__SSH_LISTEN_HOST = 0.0.0.0
+GITEA__server__SSH_LISTEN_PORT = 222
+GITEA__server__SSH_SERVER_HOST_KEYS = /var/lib/gitea/data/ssh/gogs.rsa
+GITEA__server__SSH_ROOT_PATH = /home/git/.ssh
+GITEA__server__SSH_EXPOSE_ANONYMOUS = false
+GITEA__server__OFFLINE_MODE = false
+GITEA__server__LFS_START_SERVER = false
+
+# [database]
+GITEA__database__DB_TYPE = mysql
+
+# [indexer]
+GITEA__indexer__ISSUE_INDEXER_PATH = /var/lib/gitea/data/indexers/issues.queue
+
+# [security]
+GITEA__security__INSTALL_LOCK = true
+GITEA__security__MIN_PASSWORD_LENGTH = 6
+
+# [service]
+GITEA__service__DISABLE_REGISTRATION = false
+GITEA__service__ENABLE_NOTIFY_MAIL = true
+GITEA__service__ENABLE_CAPTCHA = true
+GITEA__service__DEFAULT_ENABLE_TIMETRACKING = false
+GITEA__service__NO_REPLY_ADDRESS = noreply.example.org
+GITEA__service__ENABLE_USER_HEATMAP = false
+
+# [queue]
+GITEA__queue__DATADIR = /var/lib/gitea/data/queues
+
+# [webhook]
+GITEA__webhook__DELIVER_TIMEOUT = 60
+
+# [mailer]
+GITEA__mailer__SUBJECT_PREFIX = WACS
+
+# [picture]
+GITEA__picture__AVATAR_UPLOAD_PATH = /var/lib/gitea/data/avatars
+
+# [attachment]
+GITEA__attachment__ENABLED = true
+GITEA__attachment__PATH = /var/lib/gitea/data/attachments
+GITEA__attachment__ALLOWED_TYPES = image/jpeg|image/png|image/gif
+GITEA__attachment__MAX_SIZE = 4
+GITEA__attachment__MAX_FILES = 5
+
+# [log]
+GITEA__log__ROOT_PATH = /var/lib/gitea/log
+GITEA__log__MODE = console
+GITEA__log__LEVEL = Info
+GITEA__log__logger.access.MODE = console
+
+# [cron]
+GITEA__cron__ENABLED = true
+GITEA__cron__RUN_AT_START = false
+
+# [cron.update_mirrors]
+GITEA__cron_0X2E_update_mirrors__SCHEDULE = @every 4h
+
+# [cron.repo_health_check]
+GITEA__cron_0X2E_repo_health_check__SCHEDULE = @every 24h
+GITEA__cron_0X2E_repo_health_check__TIMEOUT = 60s
+
+# [cron.check_repo_stats]
+GITEA__cron_0X2E_check_repo_stats__RUN_AT_START = true
+GITEA__cron_0X2E_check_repo_stats__SCHEDULE = @every 24h
+
+# [cron.archive_cleanup]
+GITEA__cron_0X2E_archive_cleanup__ENABLED = true
+GITEA__cron_0X2E_archive_cleanup__RUN_AT_START = true
+GITEA__cron_0X2E_archive_cleanup__SCHEDULE = @every 24h
+GITEA__cron_0X2E_archive_cleanup__OLDER_THAN = 24h
+
+# [cron.sync_external_users]
+GITEA__cron_0X2E_sync_external_users__RUN_AT_START = false
+GITEA__cron_0X2E_sync_external_users__SCHEDULE = @every 24h
+GITEA__cron_0X2E_sync_external_users__UPDATE_EXISTING = true
+
+# [git]
+GITEA__git__MAX_GIT_DIFF_LINES = 3000
+
+# [ssh.minimum_key_sizes]
+GITEA__ssh_0X2E_minimum_key_sizes__RSA = 1024
+
+# [other]
+GITEA__other__SHOW_FOOTER_VERSION = false
+GITEA__other__SHOW_FOOTER_TEMPLATE_LOAD_TIME = false