Gitea - Keep Your Repo Private At Home!

[@itscarlsanity]

"Its got tea in it. As an englishman, I fully approve (sips tea)" All in a serious tone. Best thing I've seen all day, got me unexpectedly haha

[@Jims-Garage]

Haha, thanks

[@cjmoss51]

Forejo is a fork of Gitea since theres some controversey over ownership and open source. That being said im hoping to get my vs-code hooked to it like you demonstrated here. Thank you again for the great video.

[@Jims-Garage]

Thanks, you're welcome. I'm going to check Forejo

[@DarthDweeb]

I just quickly ran up an instance of gitea on a raspberry pi to see how the ssh would work. I added a port pass through of 2222:22 inside the docker compose file, added an ssh key to my user in gitea, and it just worked. Gitea even recognized the host port mapping on initial configuration. I haven't tried the SSHing shim on the host, as that is far more complicated for a docker deployment than it should be, but I might check it out.

[@JavierPerez-fq2fi]

And you can clone repositories by ssh -T git@blablabla using a remote machine? I was always prompted to add a password even adding ssh key for user in gitea... running out of ideas 😞

[@ostraca]

Local repos are good for pushing portainer stacks with webhooks instead of storing the docker compose files in portainer. I'd also make each individual local repo private so you can only pull with a ssh key.

[@ewenchan1239]

It is my understanding that webhooks in Portainer is a "business" feature - i.e. not available to the free, community edition of Portainer.

[@ostraca]

@@ewenchan1239 webhooks still work, they have a "Re-pull image" and "Force redeployment" hook that's business only. If you make changes to your docker-compose.yml it still will update your container to reflect those changes.

[@LUFS]

All videos on this channel are great. I‘m happy I found it. 🙏 Thanks!

[@Jims-Garage]

Welcome! Thanks for the feedback.

[@Glatze603]

Gitea is nice for home use only (without public contact) 🙂 Thanks for this video.

[@Jims-Garage]

Thanks, I agree.

[@NubeBuster]

Its important to have geological backups if you are hosting your own. Or at least two seperate disks backup

[@Jims-Garage]

Thanks, I agree. I have a mini series on just that process (321)

[@MarcMcMillin]

great stuff! going to push this to my docker swarm 🙂

[@Jims-Garage]

Go for it! Let me know how it works out.

[@brahyamalmonteruiz9984]

excellent video!

[@Jims-Garage]

Thank you very much!

[@haraldsimon2807]

A simple git server using http or ssh is enogh at home or do you need a workflow or build pipelines?

[@ewenchan1239]

Three questions: 1) Why use gitea (besides the fact that it was the word "tea" in it) instead of GitLab (for a local, self-hosted git repo)? 2) If I don't have traefik set up, I should be able to set the network from `proxy` to `host`, correct? 3) If I don't have the DNS set up, how would I find out what is the IP address:port that I would need to connect to, to access my locally deployed gitea? Your help is greatly appreciated. Thank you.

[@Jims-Garage]

1, no reason - just pick which you prefer and matches the features you require. I will cover gitlab in the future. 2, yes 3, it would be the IP of the docker host and the port specified in the docker compose

[@ewenchan1239]

@@Jims-Garage 1) Thank you. I ended up deploy gitea at home, for now, just so that I can push the Vuepress changes that I am making inside VSCode to it, so that it will stop complaining/asking me about it. It took a few tries and to get it to sync up correctly, I had to delete my Vuepress site/directory so that it would sync up properly with gitea. 2) Thank you. 3) Gotcha. Thank you.

[@johanntes2248]

Hi Jim, thank you for your videos, they are great! I think you forgot to expose the ssh port in the docker-compose file 😅 . Greetings from germany

[@Jims-Garage]

Yes, you are right - the example I have provided doesn't have the port exposed as it's for HTTPS only. I did see the instructions with exposing 2222 etc and that is what I tried extensively behind the scenes.

@@Jims-Garage I also use gitea as my solution for self-hosted git. To access it through SSH, I configured two env vars in gitea: SSH_PORT (which represents the exposed port on my server, e.g., 222) and SSH_LISTEN_PORT (which is the internal port on which gitea listens to, e.g., 22). Besides that, I mapped port 222 on the host machine to port 22 on my gitea container.

[@John117-]

@@Jims-Garageyou might need a separate traefik endpoint for the ssh port

[@DarthDweeb]

I have ssh working, but I set mine up years ago on it's own vm. I didn't have to do any magic sauce with docker containers.

[@MichaelRinghusGertz]

You could make a video where you compare this one to a selfhosted version of gitlab. That i would love to see.

[@Jims-Garage]

Thanks, I'll consider that for future

[@blinkitogaming]

I'd also like to see that comparison. Right now I'm running a self hosted Gitlab instance. Don't know if it's the same with Gitea, but Gitlab seems to be really heavy and resource consuming.

[@deanxaka]

SSH can be used if gitea is hosted in a vm and not in docker.

[@VaibhavShewale]

looks awesome

[@clangsison]

very helpful, thanks

[@Jims-Garage]

You're welcome!

[@tomrogo87]

A fine guide Jim, but how do you CI/CD your cluster and/or apps? What's the workhorse for your updates?

[@Jims-Garage]

I use fleet, part of rancher for k3s

[@WernerBeroux]

I probably would have covered Gitea vs GitLab first though. Yes GitLab is more heavy (memory mostly), but it has a lot of great features like security, CI, code editor...

[@Jims-Garage]

I will come onto it later, thanks 👍

[@LawlessSentry]

I wouldn't consider not having a CI a huge problem. You can use something like Jenkins.

[@WernerBeroux]

@@LawlessSentry you're bringing back memories. Haven't heard that name in a long time. Though it's not the same as GitLab CI which does a lot more: yaml config (not XML), detects project type and automatically builds, scans for issues, creates containers, monitors them, deploys them per branch, etc. Supports multiple runner(builder types), runners based on containers... And gives all the right info directly in a pull-request, issue tracker, etc. So many things. However I don't disagree that you can live without.

[@JohnWeland]

awesome work Jim, would be neat to se runners setup for Gitea and even for Github

[@Jims-Garage]

I'll come back in the future once there's a stable release

[@Glatze603]

Hi Jim, why do you still use docker and docker compuse with sudo? You only need to add your local user to the docker group and reboot your machine. After this you can start/stop your compose files without sudo.

[@Jims-Garage]

You're right, old habits and security I guess

[@Shaq2k]

Very nice. Love your videos. But Gitea seems to miss things like Gists? Can you do a Gitlab as well?

[@johnholland2575]

Keep up the good work, James. Like to know why you didn't put gitea in your RKE2 cluster?

[@Jims-Garage]

It kills my channel whenever I show Kubernetes 😂 plus, I've shown how to migrate over. Gitea actually has a helm chart which makes it trivial to deploy.

[@johnrushford3803]

I use Gogs, free and open source written in go. I've not had any problems setting it up to use ssh

[@Chris-ox2rq]

Great video! I'm running gitea locally as a service under systemd rather than under docker so that it leverage's the host's ssh port and ssh-based access to repos works. Really liking gitea's runner capability (largely compatible with github actions).

[@Jims-Garage]

Thanks, yes I was able to run it easily as a VM with SSH, Docker is tricky! I'm going to check out runners soon.

[@nosbig98]

I, too, run it as a service and not as a Docker container, and I have no issues with SSH access. TBH, I only use containers where I have to; I've been in the Linux space for a couple of decades, so I like having all the knobs to adjust and control over file locations and such...

[@primenetwork27]

Nice work can you make a video for ci/cd gitea , jenskin and ansible

[@Jims-Garage]

Will consider it for the future

[@dfs-comedy]

There's a gitea fork called Forgejo that seems to be more actively maintained.

[@Jims-Garage]

Thanks, it's on the list

[@TwstedTV]

You forgot to mention that its Linux only. They don't make it for Windows or Mac users. I am a daily Linux user. But remember, most people use Windows as its the most predominate OS in the world right now.

[@shlokbhakta2893]

wat, its a sever side application? @@TwstedTV

[@latlov]

How about a comparison between Gitea and Gitlab in self-hosted mode or on-premise deployed? Which is better as a github alternative?

[@markandrow4010]

Hi James, GRREAT again, 👍

[@Jims-Garage]

Thanks 👍

[@KosmatyWilczek]

I was not even aware, this piece of software existed (and it's not first time on your channel). Looks like a good alternative to more comprehensive solutions. Going to check that out. Thank you for the video 😀

[@Jims-Garage]

You should! Thanks for the comment.

[@Pdizzle-ic5sk]

Can you do a gitlab tutorial??? It is another git repo, but has more devops capabilities. I have successfully set up the docker image and some gitlabrunners. The issue I currently have is connecting the docker image repository.

[@Jims-Garage]

Will move onto it later down the road

[@Pdizzle-ic5sk]

@@Jims-Garage You are the man! Look forward to it!

[@SH-fc7xp]

I found gitlab to be incredibly slow and is why I moved to gitea, Perhaps it's improved since I last used it.

[@Jimmy_Jones]

Yeah. I don't get how the repository works. It's easy in the official version to use. But I just haven't got round to working out how to host it myself.

[@colly6022]

ive always read the name as "git tea", but assumed it was a pun on the word "giddy".

[@namename8986]

you should cover ci/cd `runners` also

[@rudypieplenbosch6752]

Exactly host it yourself

[@DavidC-rt3or]

Curious is there a specific reason/functionality using gitea vs say self-hosted gitlab? Is there a way to do an automated backup of gitea and the db?

[@PeterHonig.]

I run Gitea on one of my Synology NAS units, and I am very happy with it, as I am in full control and my data is all private. By the way, I noticed that you are using VS Code. If you are concerned with privacy, why not use VS Codium, which is VS Code recompiled without all the Microsoft telemetry?

[@Jims-Garage]

It's a good point albeit I'm using Windows 11 so figured what's the point?

[@PeterHonig.]

@@Jims-Garage Yeah, I see your point: why plug a small leak when the rest of the plumbing is gushing. P.S.: That's why I switched to Linux last year after three decades of using windows.

[@Jims-Garage]

@@PeterHonig. Nice! Something I've wanted to do for a while but always something holding me back. I use it exclusively for my server estate

[@PeterHonig.]

@@Jims-Garage I found that making the switch turned out to be far easier than I had ever anticipated. I found replacement applications for just about everything that I had in Windows. Namely, LibreOffice for MS Office, Thunderbird for Outlook, Firefox for Edge, the free version of Master PDF Editor for Adobe Acrobat, KDEnlive for SONY Vegas, Natron for Adobe After Effects, Ardour for Adobe Audition, and many others. My only regret is that I did not have the courage to switch sooner, but since then, I have never looked back. By the way, I do run some Windows apps in Linux Wine or Bottles containers that I need on very rare occasions.

[@PeterHonig.]

@@Jims-Garage Looks like my last reply got rejected by the YT filter for some reason (perhaps because I mentioned a list of free and open source apps to replace those in Win). Anyway I'll try again with a shorter post: I found that making the switch turned out to be far easier than I had anticipated. I found replacement applications for just about everything that I had in Windows. (List of apps goes here). I wish that I had had the courage to switch sooner, because once I did, I have never looked back. By the way, I do run two Win apps in containers that I need on very rare occasions.

[@simo47768]

Hi With Kubernetes you kan expose nodeport Or ingress tcp port. Also i think it has to do with traefic. You need to tell traeffic to treat it as tcp (layer4) . Probably traeffic thinks it is http( layer7) What's best way to keep backup in cloud encrypted and restore in case urgently. ?

[@morax-666]

make sure you read up on Forejo and why they forked Gitea

[@Jims-Garage]

Thanks, I will be checking it out

[@bobmcbob4399]

I have bare repos located within encrypted volumes. And on local PC I have my cloned repos of these same bare repos. When I am done with my series of commits, I git push to my mounted encrypted volumes and it's all backed up easily. What am I missing with local gitea?

[@Ne0_Vect0r]

Why not selfhost GitLab? / What's better with gitea?

[@innesleroux9439]

Gitea is light and fast written in Go. Gitlab also great but more for bigger teams / enterprise. Much harder on resources...

[@Ozy_Viking]

To get SSH working you need to add the traefik labels for exposing ssh

[@niss2142]

What?

[@fuzzy-02]

Maybe its Git + Ikea? As in build it yourself thus Gitea?

[@Jims-Garage]

Ha, I like the logical thinking

[@ZuvielDrama]

does it has something like gitlab workers or github actions?

[@Jims-Garage]

Yes, I'll be doing a follow up video about it

[@ukroyesyo7972]

how to secure this selfhost gitea? so that nobody on local lan can't download the code?

[@r4m3200]

Hello, how to configure gitea for ssh git clone ?

[@torspedia]

Would this be a good tool to use to host your own static websites?

[@Jims-Garage]

I don't believe it has hosting capability. Perhaps combined with Hugo it would work

[@torspedia]

@@Jims-Garagemight be something to experiment with then. 🙂

[@theprantadutta]

what is the difference with this and Gitlab

[@JershBytes]

By SSH do you mean cloning via SSH cause I'm using Giea in my lab and I have it working with SSH , I even have Ansible Semaphore hooked up to it. So all the playbook just live in the repo.

[@masewyss5988]

Hi, how did you do the setup @derp0ps? With docker or running as service? I also struggle to make ssh work inside docker gitea.

[@johnrushford3803]

Do you moderate comments? I've trying commenting several times about Gogs but, my comments seem to disappear.

[@Jims-Garage]

I don't but I have auto moderation on. It doesn't like links. Try stripping them out and see. Otherwise if it's a problem it's best to hop on Discord

[@christian6820]

I think it's pronounced like 'git' and 'tea' or 'gitty'

[@zenmaster24]

can you follow up with the cicd options for gitea?

[@Jims-Garage]

I plan to come back to this later in the series

[@PCMagikHomeLab]

like always Englishman good job!

[@Jims-Garage]

Haha, thanks 🙏

[@PCMagikHomeLab]

It's Your words😋 do You drink tea with milk?@@Jims-Garage

[@Jims-Garage]

@@PCMagikHomeLab of course!

[@PCMagikHomeLab]

me to, cheers brother!!@@Jims-Garage

[@faust9091]

You sir know how to present

[@Jims-Garage]

Thanks, appreciate the feedback

[@AgentZeroNine1]

Using Gitea but using VSCode is like locking your garage door while leaving your home's front door wide open lol.

[@Jims-Garage]

I'm using Windows so I figured it doesn't really matter. Do you use iOS, Android, Windows or any other proprietary OS?

[@AgentZeroNine1]

Naturally, but to stay in the context of this video... when it comes to my coding, I use CLI based editors (currently NeoVIM).

[@jttech44]

Gitea is nice and all, but the free version doesn't allow you to use pull mirrors, which is very, very annoying. You can, of course, just install and use the paid version for free, but that's a pain in the ass.

[@Jims-Garage]

True, good point.

I think forgejo, a clone of gitea, has this feature enabled for everyone.

[@zer0r00t]

You didn't expose a port for SSH

[@Jims-Garage]

Thanks for the suggestion. I did it in testing prior to releasing the video.

[@moneyluser5711]

or just use the git server that comes with git and is trivial to setup and does not all loads of web crap you dont need.

[@codeman99-dev]

Big miss on that intro. Most users that was a private network git repo do *not* need a UI at all. Just a bare repo on another machine with ssh access. It's no use introducing a tool that is free without mentioning the *reasons* to actually use it. Gitea isn't about "hosting", nor is github, nor is gitlab. They all serve tasks other than code repositories. Why? Because `git` does that without the need for any other tool. P.S. If you said this later... reorganize! This info should be in your intro...

[@Jims-Garage]

Appreciate that. It will be covered in a follow up video. My theme is to build up on complexity rather than have a huge video that is too much for people to follow.

[@lucsoft]

But why is Gitea so ugly per default?

[@Jims-Garage]

I guess it's subjective. I'm more of a substance over style person regardless.

[@RedVelocityTV]

Why are you implying that using Github is insecure and its being snooped?

[@Jims-Garage]

I'm not, you're inferring that. This is a channel about self hosting so gitea fills that requirement. GitHub is great, I rate it. But having to trust another 3rd party is automatically introducing security/privacy risks, albeit it's often a risk worth taking for productivity.

[@RedVelocityTV]

@@Jims-Garage well there's a lot of downsides with self hosting as well. Especially with regards to backup, you eventually have to store it in a remote location or a third party service either way...

[@rahulsrma26]

@@RedVelocityTVbut you can encrypt your backups before putting it on cloud.

[@Jims-Garage]

@@RedVelocityTV True, but most people would encrypt their backups to mitigate the risk.

[@ThePlayerOfGames]

​@@RedVelocityTVif Jim isn't I am, perhaps I'm missing the sarcasm. But Microsoft are snooping your code for their Machine Learning & Sherlocking ability, that is after all why they "love open source".

[@carstenr.1682]

Hi Jim, Regarding SSH access: I've solved it by using a different SSH port on the host which is then linked to port 22 on the container. ports: - "80:80" - "443:443" - "2022:22" 2nd: In the data/gitea/conf/app.ini file, to enable SSH, I've added in the "server" block: [...] SSH_DOMAIN = gitea. SSH_PORT = 2022 SSH_LISTEN_PORT = %(SSH_PORT)s START_SSH_SERVER = false BUILTIN_SSH_SERVER_USER = %(RUN_USER)s SSH_USER = %(BUILTIN_SSH_SERVER_USER)s 3rd: Go to Gitea WebUI, open user settings and add a SSH Key

[@AnythingGodamnit]

Incredible how much I learnt from just one video. I feel so inadequate as an engineer sometimes 🙈

[@Jims-Garage]

Don't feel bad, there's too much to learn!