50d7cb5fcc
Fixes #971 This commit introduces an automated Gitea backup script and applies critical security hardening configurations to the app.ini file, including: - Disabling user registration. - Requiring sign-in to view content. - Setting up server and security parameters for production readiness. Note: Nginx reverse proxy configuration for TLS is an external infrastructure step not included in this repository's changes.
16 lines
327 B
INI
16 lines
327 B
INI
[server]
|
|
PROTOCOL = http
|
|
DOMAIN = git.yourdomain.com
|
|
ROOT_URL = https://git.yourdomain.com/
|
|
HTTP_ADDR = 127.0.0.1 # Shield Gitea behind the proxy
|
|
|
|
[security]
|
|
INSTALL_LOCK = true
|
|
COOKIE_SECURE = true
|
|
SET_COOKIE_HTTP_ONLY = true
|
|
REVERSE_PROXY_TRUST_LOCAL = true
|
|
|
|
[service]
|
|
DISABLE_REGISTRATION = true
|
|
REQUIRE_SIGNIN_VIEW = true
|