From 9e804148a690e8b86bcfb9f63148f3da4b10acbc Mon Sep 17 00:00:00 2001
From: Louis Abel <label@rockylinux.org>
Date: Tue, 25 Oct 2022 16:26:39 -0700
Subject: [PATCH] add missing theme

---
 role-gitea.yml                      | 28 ++++++++++++++++++++++++++++
 templates/etc/gitea/conf/app.ini.j2 | 11 ++++++++++-
 2 files changed, 38 insertions(+), 1 deletion(-)

diff --git a/role-gitea.yml b/role-gitea.yml
index 108a55a..94f9773 100644
--- a/role-gitea.yml
+++ b/role-gitea.yml
@@ -39,6 +39,34 @@
       import_tasks: "tasks/gitea.yml"
 
   post_tasks:
+    - name: Open firewalld ports
+      ansible.posix.firewalld:
+        service: "{{ item }}"
+        permanent: true
+        immediate: true
+        state: enabled
+      with_items:
+        - http
+        - https
+
+    - name: Open 22220/tcp
+      ansible.posix.firewalld:
+        port: 22220/tcp
+        permanent: true
+        immediate: true
+        state: enabled
+
+    - name: Turn on necessary SELinux booleans
+      ansible.posix.seboolean:
+        name: "{{ item }}"
+        state: true
+        persistent: true
+      loop:
+        - httpd_can_network_connect
+        - httpd_can_network_relay
+        - httpd_can_connect_ldap
+        - httpd_read_user_content
+
     - name: Touching run file that ansible has ran here
       ansible.builtin.file:
         path: /var/log/ansible.run
diff --git a/templates/etc/gitea/conf/app.ini.j2 b/templates/etc/gitea/conf/app.ini.j2
index 2cb3b74..e9bf184 100644
--- a/templates/etc/gitea/conf/app.ini.j2
+++ b/templates/etc/gitea/conf/app.ini.j2
@@ -75,9 +75,18 @@ ROUTER    = console
 
 [ui]
 DEFAULT_THEME = gitea-blue
-THEMES = auto,gitea,arc-green,gitea-blue,gitea-modern,carbonred,darkred,pitchblack
+THEMES = auto,gitea,arc-green,gitea-blue,gitea-modern,carbonred,darkred,pitchblack,earl-grey
 AUTHOR = RESF Git Service
 DESCRIPTION = RESF Git Service for the Rocky community
 
 [admin]
 DISABLE_REGULAR_ORG_CREATION = true
+
+[cron.sync_external_users]
+ENABLED = true
+RUN_AT_START = true
+SCHEDULE = @midnight
+UPDATE_EXISTING = true
+
+[indexer]
+REPO_INDEXER_ENABLED = true