From c6d20d8a2b63f2edee50cfc7c2f6baf511cb39c5 Mon Sep 17 00:00:00 2001 From: Bitnami Bot Date: Tue, 9 Jun 2026 11:42:52 +0200 Subject: [PATCH] [bitnami/gitea] Release 1.26.2-debian-12-r7 (#94460) Signed-off-by: Bitnami Bot --- bitnami/gitea/1/debian-12/Dockerfile | 4 +-- .../prebuildfs/opt/bitnami/scripts/libos.sh | 2 +- .../opt/bitnami/scripts/libvalidations.sh | 2 +- .../opt/bitnami/scripts/libversion.sh | 33 +++++++++++++++++++ .../gitea/custom/conf/app.ini.template | 2 +- .../rootfs/opt/bitnami/scripts/gitea-env.sh | 4 +++ .../rootfs/opt/bitnami/scripts/libgitea.sh | 2 ++ bitnami/gitea/README.md | 2 ++ 8 files changed, 46 insertions(+), 5 deletions(-) diff --git a/bitnami/gitea/1/debian-12/Dockerfile b/bitnami/gitea/1/debian-12/Dockerfile index b73acf755d86..fd07c21d058d 100644 --- a/bitnami/gitea/1/debian-12/Dockerfile +++ b/bitnami/gitea/1/debian-12/Dockerfile @@ -7,7 +7,7 @@ ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith" ARG TARGETARCH LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \ - org.opencontainers.image.created="2026-06-05T10:04:25Z" \ + org.opencontainers.image.created="2026-06-09T09:06:10Z" \ org.opencontainers.image.description="Application packaged by Broadcom, Inc." \ org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/gitea/README.md" \ org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/gitea" \ @@ -52,7 +52,7 @@ COPY rootfs / RUN /opt/bitnami/scripts/gitea/postunpack.sh ENV APP_VERSION="1.26.2" \ BITNAMI_APP_NAME="gitea" \ - IMAGE_REVISION="6" \ + IMAGE_REVISION="7" \ NSS_WRAPPER_LIB="/opt/bitnami/common/lib/libnss_wrapper.so" \ PATH="/opt/bitnami/common/bin:/opt/bitnami/gitea/bin:$PATH" diff --git a/bitnami/gitea/1/debian-12/prebuildfs/opt/bitnami/scripts/libos.sh b/bitnami/gitea/1/debian-12/prebuildfs/opt/bitnami/scripts/libos.sh index 9d908c48579b..2d3c3bdb5f4a 100644 --- a/bitnami/gitea/1/debian-12/prebuildfs/opt/bitnami/scripts/libos.sh +++ b/bitnami/gitea/1/debian-12/prebuildfs/opt/bitnami/scripts/libos.sh @@ -170,7 +170,7 @@ ensure_user_exists() { if [[ -n "$home" ]]; then mkdir -p "$home" usermod -d "$home" "$user" >/dev/null 2>&1 - configure_permissions_ownership "$home" -d "775" -f "664" -u "$user" -g "$group" + configure_permissions_ownership "$home" -d "775" -f "664" -u "$user" -g "$group" -n fi } diff --git a/bitnami/gitea/1/debian-12/prebuildfs/opt/bitnami/scripts/libvalidations.sh b/bitnami/gitea/1/debian-12/prebuildfs/opt/bitnami/scripts/libvalidations.sh index bbd31b26bb2c..3a996383cfab 100644 --- a/bitnami/gitea/1/debian-12/prebuildfs/opt/bitnami/scripts/libvalidations.sh +++ b/bitnami/gitea/1/debian-12/prebuildfs/opt/bitnami/scripts/libvalidations.sh @@ -20,7 +20,7 @@ ######################### is_int() { local -r int="${1:?missing value}" - if [[ "$int" =~ ^-?[0-9]+ ]]; then + if [[ "$int" =~ ^-?[0-9]+$ ]]; then true else false diff --git a/bitnami/gitea/1/debian-12/prebuildfs/opt/bitnami/scripts/libversion.sh b/bitnami/gitea/1/debian-12/prebuildfs/opt/bitnami/scripts/libversion.sh index f0d5a5cd3389..770861ecedcd 100644 --- a/bitnami/gitea/1/debian-12/prebuildfs/opt/bitnami/scripts/libversion.sh +++ b/bitnami/gitea/1/debian-12/prebuildfs/opt/bitnami/scripts/libversion.sh @@ -49,3 +49,36 @@ get_sematic_version () { fi fi } + +######################## +# Compares two semantic versions +# Arguments: +# $1 - version1: first version to compare +# $2 - version2: second version to compare +# Returns: +# -1 if version1 is less than version2 +# 0 if version1 is equal to version2 +# 1 if version1 is greater than version2 +######################### +compare_semantic_versions() { + local version1="${1:?version1 is required}" + local version2="${2:?version2 is required}" + local major1 major2 minor1 minor2 patch1 patch2 + + major1="$(get_sematic_version "$version1" 1)" + major2="$(get_sematic_version "$version2" 1)" + minor1="$(get_sematic_version "$version1" 2)" + minor2="$(get_sematic_version "$version2" 2)" + patch1="$(get_sematic_version "$version1" 3)" + patch2="$(get_sematic_version "$version2" 3)" + + if [[ "$major1" -eq "$major2" ]] && [[ "$minor1" -eq "$minor2" ]] && [[ "$patch1" -eq "$patch2" ]]; then + echo "0" + elif [[ "$major1" -lt "$major2" ]] || + { [[ "$major1" -eq "$major2" ]] && [[ "$minor1" -lt "$minor2" ]]; } || + { [[ "$major1" -eq "$major2" ]] && [[ "$minor1" -eq "$minor2" ]] && [[ "$patch1" -lt "$patch2" ]]; }; then + echo "-1" + else + echo "1" + fi +} diff --git a/bitnami/gitea/1/debian-12/rootfs/opt/bitnami/gitea/custom/conf/app.ini.template b/bitnami/gitea/1/debian-12/rootfs/opt/bitnami/gitea/custom/conf/app.ini.template index a7071b11c1da..8d2b639a40e1 100644 --- a/bitnami/gitea/1/debian-12/rootfs/opt/bitnami/gitea/custom/conf/app.ini.template +++ b/bitnami/gitea/1/debian-12/rootfs/opt/bitnami/gitea/custom/conf/app.ini.template @@ -52,7 +52,7 @@ ROOT_PATH = {{GITEA_LOG_ROOT_PATH}} [security] PASSWORD_HASH_ALGO = {{GITEA_PASSWORD_HASH_ALGO}} REVERSE_PROXY_LIMIT = 1 -REVERSE_PROXY_TRUSTED_PROXIES = * +REVERSE_PROXY_TRUSTED_PROXIES = 127.0.0.0/8,::1/128 [openid] ENABLE_OPENID_SIGNIN = {{GITEA_ENABLE_OPENID_SIGNIN}} diff --git a/bitnami/gitea/1/debian-12/rootfs/opt/bitnami/scripts/gitea-env.sh b/bitnami/gitea/1/debian-12/rootfs/opt/bitnami/scripts/gitea-env.sh index ebb4ecfc6e53..a64f7db498a7 100644 --- a/bitnami/gitea/1/debian-12/rootfs/opt/bitnami/scripts/gitea-env.sh +++ b/bitnami/gitea/1/debian-12/rootfs/opt/bitnami/scripts/gitea-env.sh @@ -44,6 +44,8 @@ gitea_env_vars=( GITEA_ROOT_URL GITEA_PASSWORD_HASH_ALGO GITEA_LFS_START_SERVER + GITEA_REVERSE_PROXY_TRUSTED_PROXIES + GITEA_REVERSE_PROXY_LIMIT GITEA_ENABLE_OPENID_SIGNIN GITEA_ENABLE_OPENID_SIGNUP GITEA_DATABASE_TYPE @@ -112,6 +114,8 @@ export GITEA_PROTOCOL="${GITEA_PROTOCOL:-http}" export GITEA_ROOT_URL="${GITEA_ROOT_URL:-${GITEA_PROTOCOL}://${GITEA_DOMAIN}:${GITEA_HTTP_PORT}}" export GITEA_PASSWORD_HASH_ALGO="${GITEA_PASSWORD_HASH_ALGO:-pbkdf2_hi}" export GITEA_LFS_START_SERVER="${GITEA_LFS_START_SERVER:-false}" +export GITEA_REVERSE_PROXY_TRUSTED_PROXIES="${GITEA_REVERSE_PROXY_TRUSTED_PROXIES:-}" +export GITEA_REVERSE_PROXY_LIMIT="${GITEA_REVERSE_PROXY_LIMIT:-1}" export GITEA_ENABLE_OPENID_SIGNIN="${GITEA_ENABLE_OPENID_SIGNIN:-false}" export GITEA_ENABLE_OPENID_SIGNUP="${GITEA_ENABLE_OPENID_SIGNUP:-false}" export GITEA_DATABASE_TYPE="${GITEA_DATABASE_TYPE:-postgres}" diff --git a/bitnami/gitea/1/debian-12/rootfs/opt/bitnami/scripts/libgitea.sh b/bitnami/gitea/1/debian-12/rootfs/opt/bitnami/scripts/libgitea.sh index c9aec6ea6003..89e42d135471 100644 --- a/bitnami/gitea/1/debian-12/rootfs/opt/bitnami/scripts/libgitea.sh +++ b/bitnami/gitea/1/debian-12/rootfs/opt/bitnami/scripts/libgitea.sh @@ -232,6 +232,8 @@ gitea_update_conf_file() { gitea_conf_set "log" "ROOT_PATH" "$GITEA_LOG_ROOT_PATH" gitea_conf_set "repository" "ROOT" "$GITEA_REPO_ROOT_PATH" gitea_conf_set "security" "PASSWORD_HASH_ALGO" "$GITEA_PASSWORD_HASH_ALGO" + gitea_conf_set "security" "REVERSE_PROXY_LIMIT" "$GITEA_REVERSE_PROXY_LIMIT" + ! is_empty_value "$GITEA_REVERSE_PROXY_TRUSTED_PROXIES" && gitea_conf_set "security" "REVERSE_PROXY_TRUSTED_PROXIES" "$GITEA_REVERSE_PROXY_TRUSTED_PROXIES" gitea_conf_set "mailer" "ENABLED" "$GITEA_SMTP_ENABLED" is_empty_value "$GITEA_SMTP_HOST" || gitea_conf_set "mailer" "SMTP_ADDR" "$GITEA_SMTP_HOST" diff --git a/bitnami/gitea/README.md b/bitnami/gitea/README.md index 869c535cc647..2661bc6bd9cd 100644 --- a/bitnami/gitea/README.md +++ b/bitnami/gitea/README.md @@ -92,6 +92,8 @@ The following tables list the main variables you can set. | `GITEA_ROOT_URL` | Overwrite the automatically generated public URL. This is useful if the internal and the external URL don't match | `${GITEA_PROTOCOL}://${GITEA_DOMAIN}:${GITEA_HTTP_PORT}` | | `GITEA_PASSWORD_HASH_ALGO` | The hash algorithm to use [argon2, pbkdf2, pbkdf2_hi, scrypt, bcrypt], argon2 will spend more memory than others. | `pbkdf2_hi` | | `GITEA_LFS_START_SERVER` | Enables Git LFS support | `false` | +| `GITEA_REVERSE_PROXY_TRUSTED_PROXIES` | List of IPs to trust when reading X-Forwarded-* headers. | `nil` | +| `GITEA_REVERSE_PROXY_LIMIT` | How many reverse‑proxy headers Gitea will trust. | `1` | | `GITEA_ENABLE_OPENID_SIGNIN` | Enable OpenID sign-in. | `false` | | `GITEA_ENABLE_OPENID_SIGNUP` | Enable OpenID sign-up. | `false` | | `GITEA_DATABASE_TYPE` | The database type in use [mysql, postgres]. | `postgres` |