aynish/helm
1
0
Fork 0
Code Pull requests Packages Projects Releases Activity

Reduce gitea logging & disable basic auth for api

Browse source 
- Disabled SQL logs because they quickly fill up the logs and aren't
  useful, currently. Also, smaller logs = easier job for fail2ban.
- Disabled basic auth because it's the least secure method of
  interacting with the gitea API. Tokens/oauth are better.
This commit is contained in:
Henrik Lissner 2021-01-31 18:20:58 -05:00
parent c32a1846e0
commit 25a87f24d9
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
modules/services/gitea.nix
View file

@ -38,7 +38,11 @@ in {
cookieSecure = true; cookieSecure = true;
# Only log what's important, but Info is necessary for fail2ban to work # Only log what's important, but Info is necessary for fail2ban to work
log.level = "Info"; log.level = "Info";
settings.server.DISABLE_ROUTER_LOG = true; settings = {
server.DISABLE_ROUTER_LOG = true;
database.LOG_SQL = false;
service.ENABLE_BASIC_AUTHENTICATION = false;
};
}; };
services.fail2ban.jails.gitea = '' services.fail2ban.jails.gitea = ''