From 5f4ac95280ba612a6bf3ce1aa58cc1d11c3c89b4 Mon Sep 17 00:00:00 2001
From: benjaoming <benjamin@overtag.dk>
Date: Mon, 31 May 2021 10:02:53 +0000
Subject: [PATCH] Add security and password policy customization

I need someone with a functional Docker setup to help test this :)

Tip from a new user that we are requiring stupid password stuff

https://www.bbc.com/news/technology-40875534
---
 roles/docker/tasks/services/gitea.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/roles/docker/tasks/services/gitea.yml b/roles/docker/tasks/services/gitea.yml
index 96e4358..009fec5 100644
--- a/roles/docker/tasks/services/gitea.yml
+++ b/roles/docker/tasks/services/gitea.yml
@@ -21,3 +21,8 @@
       VIRTUAL_PORT: "3000"
       LETSENCRYPT_HOST: "{{ gitea.domain }}"
       LETSENCRYPT_EMAIL: "{{ letsencrypt_email }}"
+      # Gitea customization, see: https://docs.gitea.io/en-us/install-with-docker/#customization
+      # https://docs.gitea.io/en-us/config-cheat-sheet/#security-security
+      GITEA__security__PASSWORD_COMPLEXITY: "off"
+      GITEA__security__MIN_PASSWORD_LENGTH: "8"
+      GITEA__security__PASSWORD_CHECK_PWN: "true"