clawbot 20f99b2cdd deploy/gitea: Gitea behind traefik, rproxy and servewaf, with its test (closes #178) ...

deploy/gitea/compose.yaml runs traefik, stock Gitea 1.27.3, rproxy and
servewaf on one network with a fixed subnet. Its containers skip
servewaf's checks; the network's gateway is left out of that range.
rproxy takes uploads of 2 GiB and 30 minutes, and cuts responses at 15
minutes. script/gitea-setup (make gitea-setup) brings the setup up and
checks it. docs/gitea.md is rewritten around the setup.

Judgement call: the Core Rule Set runs in detect mode, so it refuses nothing.
Judgement call: traefik serves its own certificate; no certificate resolver.
Partially verified: the image build failed three runs on Ubuntu's snapshot
service, so the checks ran only against a stand-in image with the same binary.

Model: deepseek-v4-pro

2026-11-05 22:35:23 +00:00

..

example-app

The image apps build FROM, with its health check (closes #45)

2026-10-04 10:05:30 +02:00

gitea

deploy/gitea: Gitea behind traefik, rproxy and servewaf, with its test (closes #178)

2026-11-05 22:35:23 +00:00