chore: upgrade to 28.2.0-rootless

chore: publish 3.6.9+28.1.0-rootless release
chore(ci): refresh PR after upstream main rebase (no tree change)
2026-10-23 02:50:27 +00:00 · 2026-10-19 09:44:17 -07:00 · 2026-10-09 02:31:53 +00:00 · 2026-10-09 02:25:22 +00:00 · 2026-10-05 11:00:16 -07:00 · 2026-10-02 03:57:03 +00:00
5 changed files with 15 additions and 3 deletions
@@ -13,6 +13,9 @@ COMPOSE_FILE="$COMPOSE_FILE:compose.mariadb.yml"
 # COMPOSE_FILE="$COMPOSE_FILE:compose.lfs.yml"
 # SECRET_LFS_JWT_SECRET_VERSION=v1 # length=43

+# Anubis
+# COMPOSE_FILE="$COMPOSE_FILE:compose.anubis.yml"
+
 GITEA_ALLOW_ONLY_EXTERNAL_REGISTRATION=true
 GITEA_APP_NAME="Git with solidaritea"
 GITEA_AUTO_WATCH_NEW_REPOS=false
@@ -78,3 +81,4 @@ SECRET_SECRET_KEY_VERSION=v1 # length=64
 # GITEA_REPO_INDEXER_ENABLED=false
 # GITEA_ISSUE_INDEXER_TYPE=db
 # GITEA_STARTUP_TIMEOUT=-1
+
@@ -0,0 +1,7 @@
+---
+version: "3.8"
+services:
+  app:
+    deploy:
+      labels:
+      - "traefik.http.routers.${STACK_NAME}.middlewares=anubis,${STACK_NAME}_cors"
@@ -10,7 +10,7 @@ services:
    secrets:
      - db_password
  db:
-    image: "mariadb:10.11.2"
+    image: "mariadb:10.11.19"
    deploy:
      labels:
          backupbot.backup.pre-hook: 'mysqldump --single-transaction -u root -p"$$(cat /run/secrets/db_root_password)" gitea > /var/lib/mysql/backup.sql'
@@ -3,7 +3,7 @@ version: "3.8"

 services:
  app:
-    image: "gitea/gitea:1.27.3-rootless"
+    image: "gitea/gitea:28.2.0-rootless"
    configs:
      - source: app_ini
        target: /etc/gitea/app.ini
@@ -87,7 +87,7 @@ services:
        - "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolalloworiginlist=https://${GITEA_CORS_ALLOW_DOMAIN}"
        - "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolmaxage=100"
        - "traefik.http.middlewares.${STACK_NAME}_cors.headers.addvaryheader=true"
-        - coop-cloud.${STACK_NAME}.version=3.6.4+1.27.2-rootless
+        - coop-cloud.${STACK_NAME}.version=3.6.9+28.1.0-rootless


 networks:
@@ -0,0 +1 @@
+ git egress has been reworked. ALLOWED_DOMAINS / BLOCKED_DOMAINS / ALLOW_LOCALNETWORKS are deprecated (migrated to [security] ALLOWED_HOST_LIST / BLOCKED_HOST_LIST) Operators who restrict git egress must switch to EGRESS_MODE = strict + explicit CIDRs to keep a deny-by-default policy.
Author	SHA1	Message	Date
autonomic-bot	719d230085	chore: upgrade to 28.2.0-rootless cc-ci/testme cc-ci: success Details	2026-10-23 02:50:27 +00:00
trav	e4d33286b4	chore: publish 3.6.9+28.1.0-rootless release	2026-10-19 09:44:17 -07:00
autonomic-bot	f2b5089c08	chore(ci): refresh PR after upstream main rebase (no tree change) cc-ci/testme cc-ci: success Details	2026-10-09 02:31:53 +00:00
autonomic-bot	efa7274a31	chore: upgrade to 28.1.0-rootless	2026-10-09 02:25:22 +00:00
trav	97eb7bf110	chore: publish 3.6.8+28.0.0-rootless release	2026-10-05 11:00:16 -07:00
autonomic-bot	91e42c8a5f	chore: upgrade to 28.0.0-rootless cc-ci/testme cc-ci: success Details	2026-10-02 03:57:03 +00:00
trav	f167b73115	chore: publish 3.6.7+1.27.3-rootless release	2026-09-14 12:25:47 -07:00
trav	f8fb9bb9af	Merge pull request 'chore: upgrade db to 10.11.19 (mariadb overlay)' (#67 ) from upgrade-mariadb-10.11.19 into master Reviewed-on: https://git.coopcloud.tech/coop-cloud/gitea/pulls/67	2026-09-14 19:25:17 +00:00
autonomic-bot	370757aa26	chore: upgrade db to 10.11.19 (mariadb overlay)	2026-09-14 19:23:55 +00:00
trav	bb17de666e	chore: publish 3.6.6+1.27.3-rootless release	2026-09-14 12:20:10 -07:00
notplants	feb3acc851	chore: publish 3.6.5+1.27.3-rootless release	2026-09-07 19:12:47 -04:00
notplants	211052d9de	Merge pull request 'chore: upgrade to 1.27.3-rootless' (#65 ) from upgrade-1.27.3-rootless into master Reviewed-on: https://git.coopcloud.tech/coop-cloud/gitea/pulls/65	2026-09-07 22:55:02 +00:00
notplants	73f61cd95a	Merge branch 'master' into upgrade-1.27.3-rootless	2026-09-07 22:54:42 +00:00
cas	116d6049b7	Add Anubis config from Forgejo.	2026-09-01 10:39:22 -07:00
				`@@ -0,0 +1 @@`
				`git egress has been reworked. ALLOWED_DOMAINS / BLOCKED_DOMAINS / ALLOW_LOCALNETWORKS are deprecated (migrated to [security] ALLOWED_HOST_LIST / BLOCKED_HOST_LIST) Operators who restrict git egress must switch to EGRESS_MODE = strict + explicit CIDRs to keep a deny-by-default policy.`