[bitnami/gitea] Release 1.26.2-debian-12-r7 (#94460)

Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
2026-10-10 10:10:16 +02:00 · 2026-06-09 11:42:52 +02:00
parent f41be6703b
commit c6d20d8a2b
8 changed files with 46 additions and 5 deletions
@@ -7,7 +7,7 @@ ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith"
 ARG TARGETARCH

 LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2026-06-05T10:04:25Z" \
+      org.opencontainers.image.created="2026-06-09T09:06:10Z" \
      org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
      org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/gitea/README.md" \
      org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/gitea" \
@@ -52,7 +52,7 @@ COPY rootfs /
 RUN /opt/bitnami/scripts/gitea/postunpack.sh
 ENV APP_VERSION="1.26.2" \
    BITNAMI_APP_NAME="gitea" \
-    IMAGE_REVISION="6" \
+    IMAGE_REVISION="7" \
    NSS_WRAPPER_LIB="/opt/bitnami/common/lib/libnss_wrapper.so" \
    PATH="/opt/bitnami/common/bin:/opt/bitnami/gitea/bin:$PATH"

@@ -170,7 +170,7 @@ ensure_user_exists() {
    if [[ -n "$home" ]]; then
        mkdir -p "$home"
        usermod -d "$home" "$user" >/dev/null 2>&1
-        configure_permissions_ownership "$home" -d "775" -f "664" -u "$user" -g "$group"
+        configure_permissions_ownership "$home" -d "775" -f "664" -u "$user" -g "$group" -n
    fi
 }

@@ -20,7 +20,7 @@
 #########################
 is_int() {
    local -r int="${1:?missing value}"
-    if [[ "$int" =~ ^-?[0-9]+ ]]; then
+    if [[ "$int" =~ ^-?[0-9]+$ ]]; then
        true
    else
        false
@@ -49,3 +49,36 @@ get_sematic_version () {
        fi
    fi
 }
+
+########################
+# Compares two semantic versions
+# Arguments:
+#   $1 - version1: first version to compare
+#   $2 - version2: second version to compare
+# Returns:
+#   -1 if version1 is less than version2
+#   0 if version1 is equal to version2
+#   1 if version1 is greater than version2
+#########################
+compare_semantic_versions() {
+    local version1="${1:?version1 is required}"
+    local version2="${2:?version2 is required}"
+    local major1 major2 minor1 minor2 patch1 patch2
+
+    major1="$(get_sematic_version "$version1" 1)"
+    major2="$(get_sematic_version "$version2" 1)"
+    minor1="$(get_sematic_version "$version1" 2)"
+    minor2="$(get_sematic_version "$version2" 2)"
+    patch1="$(get_sematic_version "$version1" 3)"
+    patch2="$(get_sematic_version "$version2" 3)"
+
+    if [[ "$major1" -eq "$major2" ]] && [[ "$minor1" -eq "$minor2" ]] && [[ "$patch1" -eq "$patch2" ]]; then
+        echo "0"
+    elif [[ "$major1" -lt "$major2" ]] ||
+      { [[ "$major1" -eq "$major2" ]] && [[ "$minor1" -lt "$minor2" ]]; } ||
+      { [[ "$major1" -eq "$major2" ]] && [[ "$minor1" -eq "$minor2" ]] && [[ "$patch1" -lt "$patch2" ]]; }; then
+        echo "-1"
+    else
+        echo "1"
+    fi
+}
@@ -52,7 +52,7 @@ ROOT_PATH = {{GITEA_LOG_ROOT_PATH}}
 [security]
 PASSWORD_HASH_ALGO = {{GITEA_PASSWORD_HASH_ALGO}}
 REVERSE_PROXY_LIMIT = 1
-REVERSE_PROXY_TRUSTED_PROXIES = *
+REVERSE_PROXY_TRUSTED_PROXIES = 127.0.0.0/8,::1/128

 [openid]
 ENABLE_OPENID_SIGNIN = {{GITEA_ENABLE_OPENID_SIGNIN}}
@@ -44,6 +44,8 @@ gitea_env_vars=(
    GITEA_ROOT_URL
    GITEA_PASSWORD_HASH_ALGO
    GITEA_LFS_START_SERVER
+    GITEA_REVERSE_PROXY_TRUSTED_PROXIES
+    GITEA_REVERSE_PROXY_LIMIT
    GITEA_ENABLE_OPENID_SIGNIN
    GITEA_ENABLE_OPENID_SIGNUP
    GITEA_DATABASE_TYPE
@@ -112,6 +114,8 @@ export GITEA_PROTOCOL="${GITEA_PROTOCOL:-http}"
 export GITEA_ROOT_URL="${GITEA_ROOT_URL:-${GITEA_PROTOCOL}://${GITEA_DOMAIN}:${GITEA_HTTP_PORT}}"
 export GITEA_PASSWORD_HASH_ALGO="${GITEA_PASSWORD_HASH_ALGO:-pbkdf2_hi}"
 export GITEA_LFS_START_SERVER="${GITEA_LFS_START_SERVER:-false}"
+export GITEA_REVERSE_PROXY_TRUSTED_PROXIES="${GITEA_REVERSE_PROXY_TRUSTED_PROXIES:-}"
+export GITEA_REVERSE_PROXY_LIMIT="${GITEA_REVERSE_PROXY_LIMIT:-1}"
 export GITEA_ENABLE_OPENID_SIGNIN="${GITEA_ENABLE_OPENID_SIGNIN:-false}"
 export GITEA_ENABLE_OPENID_SIGNUP="${GITEA_ENABLE_OPENID_SIGNUP:-false}"
 export GITEA_DATABASE_TYPE="${GITEA_DATABASE_TYPE:-postgres}"
@@ -232,6 +232,8 @@ gitea_update_conf_file() {
    gitea_conf_set "log" "ROOT_PATH" "$GITEA_LOG_ROOT_PATH"
    gitea_conf_set "repository" "ROOT" "$GITEA_REPO_ROOT_PATH"
    gitea_conf_set "security" "PASSWORD_HASH_ALGO" "$GITEA_PASSWORD_HASH_ALGO"
+    gitea_conf_set "security" "REVERSE_PROXY_LIMIT" "$GITEA_REVERSE_PROXY_LIMIT"
+    ! is_empty_value "$GITEA_REVERSE_PROXY_TRUSTED_PROXIES" && gitea_conf_set "security" "REVERSE_PROXY_TRUSTED_PROXIES" "$GITEA_REVERSE_PROXY_TRUSTED_PROXIES"

    gitea_conf_set "mailer" "ENABLED" "$GITEA_SMTP_ENABLED"
    is_empty_value "$GITEA_SMTP_HOST" || gitea_conf_set "mailer" "SMTP_ADDR" "$GITEA_SMTP_HOST"
@@ -92,6 +92,8 @@ The following tables list the main variables you can set.
 | `GITEA_ROOT_URL`                                | Overwrite the automatically generated public URL. This is useful if the internal and the external URL don't match | `${GITEA_PROTOCOL}://${GITEA_DOMAIN}:${GITEA_HTTP_PORT}` |
 | `GITEA_PASSWORD_HASH_ALGO`                      | The hash algorithm to use [argon2, pbkdf2, pbkdf2_hi, scrypt, bcrypt], argon2 will spend more memory than others. | `pbkdf2_hi`                                              |
 | `GITEA_LFS_START_SERVER`                        | Enables Git LFS support                                                                                           | `false`                                                  |
+| `GITEA_REVERSE_PROXY_TRUSTED_PROXIES`           | List of IPs to trust when reading X-Forwarded-* headers.                                                          | `nil`                                                    |
+| `GITEA_REVERSE_PROXY_LIMIT`                     | How many reverse‑proxy headers Gitea will trust.                                                                  | `1`                                                      |
 | `GITEA_ENABLE_OPENID_SIGNIN`                    | Enable OpenID sign-in.                                                                                            | `false`                                                  |
 | `GITEA_ENABLE_OPENID_SIGNUP`                    | Enable OpenID sign-up.                                                                                            | `false`                                                  |
 | `GITEA_DATABASE_TYPE`                           | The database type in use [mysql, postgres].                                                                       | `postgres`                                               |