ansible-gerrit-management/templates/gerrit.config.j2

60 lines
1.7 KiB
Django/Jinja

[gerrit]
basePath = git
canonicalWebUrl = {{ gerrit_config_canonical_weburl }}
[container]
javaOptions = {{ gerrit_container_java_options }}
user = {{ gerrit_user }}
heapLimit = {{ gerrit_container_heap_limit }}
javaHome = /usr/lib/jvm/jre/
[index]
type = {{ gerrit_index_type }}
[auth]
type = {{ gerrit_auth_type }}
userNameCaseInsensitive = true
{% if gerrit_auth_type == 'OAUTH' %}
gitBasicAuthPolicy = HTTP
[plugin "oauth-keycloak-oauth"]
root-url = {{ oauth_base_url }}
realm = {{ oauth_realm }}
client-id = {{ oauth_client_id }}
client-secret = {{ oauth_client_secret }}
{% endif %}
[receive]
enableSignedPush = true
checkReferencedObjectsAreReachable = {{ gerrit_referenced_objects_reachable }}
[sendemail]
smtpServer = localhost
[sshd]
listenAddress = {{ gerrit_sshd_listen_address }}
threads = {{ gerrit_sshd_threads }}
[httpd]
listenUrl = {{ gerrit_httpd_listen_url }}
[cache]
directory = cache
{% if gerrit_auth_type == "LDAP" %}
[ldap]
server = {{ ldap_url_list|join(' ') }}
accountBase = cn=users,cn=accounts,dc=rockylinux,dc=org
accountPattern = (&(objectClass=posixAccount)(memberOf=cn=signed_rgca,cn=groups,cn=accounts,dc=rockylinux,dc=org)(uid=${username}))
accountFullName = displayName
accountEmailAddress = mail
accountMemberField = memberOf
groupBase = cn=groups,cn=accounts,dc=rockylinux,dc=org
groupPattern = (cn=${groupname})
localUsernameToLowerCase = true
startTls = true
sslVerify = true
{% endif %}
[plugin "avatars-gravatar"]
url = https://seccdn.libravatar.org/avatar/