使用gitea搭建Git服务

你的名字 2023-02-21 04:59 23阅读 0赞

--------------------

title: 使用gitea搭建Git服务  
date: 2020-05-20 13:14:00  
tags: \[Git\]  
categories: \[Git\]

--------------------

### 前情提示 ###

阿里、tx、西数centOS6.4，6系列均可`cat /etc/redhat-release`

gitea1.12

Git 2.26.2最新稳定版本；

MySQL8社区版：mysql-8.0.20-1.el6.x86\_64.rpm-bundle.tar；

### 废话说在前面 ###

已从gogs转移至gitea。为什么？这么说吧，给你个Google pixel手机（原生安卓系统），一个小米手机（基于Android，定制化，更人性）。哪个用的舒服？gitea和其他对比，可以看官网横向对比。gitea的好可以自己看官网特性，这里不再赘述。

至于为什么换成gitea，当初因为组织团队权限推送问题和批量绑定仓库问题，这两点gogs是没有的，另外，两者个人感觉都活跃，gitea更加频繁，毕竟是社区化的合作开发。

两者都有try，自己体验，尝试。

### 更新说明 ###

1.  去除普通图片截图，保留部分核心截图；详细截图可参考：https://blog.csdn.net/qq\_31708763/article/details/104814669
2.  gitea1.11.5到1.12从80M到120M，看来更新不少。
3.  本文仅内部搭建环境使用，本文不再更新，有问题留言，或移步新地址。

### 软件准备 ###

软件下载，官网下载或云盘下载。步骤略。

将下载好的软件上传到服务器。

mkdir -p /server/backup/gs
    # scp -P 22000 -r -v /server/backup/gs/* root@211.149.239.182:/server/backup/gs
    scp -P 22 -r -v /server/backup/gs/* root@59.110.21.159:/server/backup/gs
    # scp -P 22 -r -v /server/backup/gs/gitea-1.12-linux-amd64 root@59.110.21.159:/server/backup/gs
    #如果重装
    ssh-keygen -R 59.110.21.159

### 更新yum（可选） ###

yum -y update

### swap创建（可选） ###

sudo dd if=/dev/zero of=/swapfile count=2048 bs=1M
    sudo chmod 600 /swapfile
    sudo mkswap /swapfile
    sudo swapon /swapfile
    echo '/swapfile   none    swap    sw    0   0' | sudo tee -a /etc/fstab
    free -m
    history | grep 'swap'
    删除
    1. 停止正在使用的swap分区
    $ swapoff /root/swap
    
    2. 删除swap分区文件
    $ rm /root/swap
    
    3. 删除或注释在/etc/fstab文件中的以下开机自动挂载内容：
    $ vim /etc/fstab 在该文件中删除如下内容

### 更新内核 ###

gitea必须，否则centos6下报错：kernel too old。

解决：https://janeyork.blog.csdn.net/article/details/106496370

### MySQL安装 ###

rpm -qa|grep mysql
    # 如果有，卸载
    yum -y remove mysql mysql-server mysql-libs compat-mysql51
    rm -rf /var/lib/mysql
    ##可能cannot remove ‘/etc/my.cnf’: No such file or directory
    rm /etc/my.cnf
    rpm -e mysql-community-client-8.0.20-1.el6.x86_64 --nodeps
    rpm -e mysql-community-libs-8.0.20-1.el6.x86_64 --nodeps
    rpm -e mysql-community-server-8.0.20-1.el6.x86_64 --nodeps
    rpm -e mysql-community-common-8.0.20-1.el6.x86_64 --nodeps

安装依赖

yum -y install wget gcc-c++ ncurses ncurses-devel cmake make perl bison openssl openssl-devel gcc* libxml2 libxml2-devel curl-devel libjpeg* libpng* freetype* make gcc-c++ cmake bison-devel ncurses-devel bison perl perl-devel perl perl-devel net-tools* numactl*

安装MySQL

cd /server/backup/gs/
    rpm -ivh mysql-community-common-8.0.20-1.el6.x86_64.rpm --nodeps --force
    rpm -ivh mysql-community-libs-8.0.20-1.el6.x86_64.rpm --nodeps --force
    rpm -ivh mysql-community-client-8.0.20-1.el6.x86_64.rpm --nodeps --force
    rpm -ivh mysql-community-server-8.0.20-1.el6.x86_64.rpm --nodeps --force

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMxNzA4NzYz_size_16_color_FFFFFF_t_70]

配置/etc/my.cnf，添加如下：

lower_case_table_names=1
    sql_mode='STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_ENGINE_SUBSTITUTION'

完整内容：

# For advice on how to change settings please see
    # http://dev.mysql.com/doc/refman/8.0/en/server-configuration-defaults.html
    
    [mysqld]
    #
    # Remove leading # and set to the amount of RAM for the most important data
    # cache in MySQL. Start at 70% of total RAM for dedicated server, else 10%.
    # innodb_buffer_pool_size = 128M
    #
    # Remove the leading "# " to disable binary logging
    # Binary logging captures changes between backups and is enabled by
    # default. It's default setting is log_bin=binlog
    # disable_log_bin
    #
    # Remove leading # to set options mainly useful for reporting servers.
    # The server defaults are faster for transactions and fast SELECTs.
    # Adjust sizes as needed, experiment to find the optimal values.
    # join_buffer_size = 128M
    # sort_buffer_size = 2M
    # read_rnd_buffer_size = 2M
    #
    # Remove leading # to revert to previous value for default_authentication_plugin,
    # this will increase compatibility with older clients. For background, see:
    # https://dev.mysql.com/doc/refman/8.0/en/server-system-variables.html#sysvar_default_authentication_plugin
    # default-authentication-plugin=mysql_native_password
    
    datadir=/var/lib/mysql
    socket=/var/lib/mysql/mysql.sock
    
    log-error=/var/log/mysqld.log
    pid-file=/var/run/mysqld/mysqld.pid
    
    lower_case_table_names=1
    sql_mode='STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_ENGINE_SUBSTITUTION'

启动：

groupadd mysql
    useradd -g mysql mysql
    mkdir -p /var/lib/mysql
    
    
    mysqld --initialize --user=mysql
    chown -R mysql:mysql /var/lib/mysql
    chmod -R 777 /var/lib/mysql
    
    centOS6:
    service mysqld start
    查看启动状态
    service mysqld status
    # 设置开机启动（可不用，rmp安装完，默认自启）
    # chkconfig mysqld on

以下为备份内容，并未执行：
    如果以root用户身份登录CentOS 6.8服务器，可以执行如下命令。
    mysqld --initialize --user=mysql
    mysqld --initialize-insecure --user=mysql
    如果以mysql用户身份登录CentOS 6.8服务器，可以执行如下命令。
    mysqld --initialize
    mysqld --initialize-insecure
    因为我这里使用的是root账户登录CentOS 6.8服务器，所以，初始化数据库时，我执行的是如下命令。
    mkdir -p /usr/local/mysql
    chown -R mysql.mysql /usr/local/mysql
    mysqld --initialize --user=mysql --basedir=/usr/local/mysql --datadir=/usr/local/mysql/data
    注意：这里，我在执行mysqld --initialize命令时，指定了MySQL的安装目录。 在MySQL的安装过程中，建议指定MySQL的安装目录。当/usr/local/mysql目录下存在data目录时，会初始化失败，必须确保/usr/local/mysql下没有data目录。

查看临时生成的密码：

cat /var/log/mysqld.log | grep password

修改初始密码：

mysql -u root -p
    DhPO0Wr-#kqp
    # 高版本数据库使用强密码规则，密码设置尽可能麻烦，大写+小写+数字+符号
    ALTER USER 'root'@'localhost' IDENTIFIED BY 'Woshihenfuzademima$_$';
    exit;

创建远程账号：

mysql -u root -p
    Woshihenfuzademima$_$
    CREATE USER 'remote'@'%' IDENTIFIED BY 'Woshihenfuzademima$_$';
    GRANT ALL PRIVILEGES ON *.* TO 'remote'@'%'WITH GRANT OPTION;
    FLUSH PRIVILEGES;
    exit;

### 配置防火墙 ###

`vi /etc/sysconfig/iptables`

# Firewall configuration written by system-config-firewall
    # Manual customization of this file is not recommended.
    *filter
    :INPUT ACCEPT [0:0]
    :FORWARD ACCEPT [0:0]
    :OUTPUT ACCEPT [0:0]
    -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
    -A INPUT -p icmp -j ACCEPT
    -A INPUT -i lo -j ACCEPT
    -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
    -A INPUT -m state --state NEW -m tcp -p tcp --dport 22000 -j ACCEPT
    -A INPUT -m state --state NEW -m tcp -p tcp --dport 3306 -j ACCEPT
    -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
    -A INPUT -m state --state NEW -m tcp -p tcp --dport 8080 -j ACCEPT
    -A INPUT -m state --state NEW -m tcp -p tcp --dport 3000 -j ACCEPT
    -A INPUT -m state --state NEW -m tcp -p tcp --dport 3001 -j ACCEPT
    -A INPUT -m state --state NEW -m tcp -p tcp --dport 4000 -j ACCEPT
    -A INPUT -m state --state NEW -m tcp -p tcp --dport 9527 -j ACCEPT
    -A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
    -A INPUT -j REJECT --reject-with icmp-host-prohibited
    -A FORWARD -j REJECT --reject-with icmp-host-prohibited
    COMMIT

修改完成后，重启防火墙：`service iptables restart`，如果有必要，请登录云安全组开放端口。

说明：rpm方式安装mysql默认位置：

1、数据库目录
    /var/lib/mysql/
    2、配置文件
    /usr/share/mysql(mysql.server命令及配置文件)
    3、相关命令
    /usr/bin(mysqladmin mysqldump等命令)
    4、启动脚本
    /etc/rc.d/init.d/(启动脚本文件mysql的目录)

### Git安装 ###

卸载旧版本：

查看源版本信息：
    yum info git
    git --version
    如果安装了，卸载：
    yum remove git

安装依赖：

yum install -y asciidoc docbook2X xmlto texinfo sgml2xml autoconf openjade curl-devel expat-devel gettext-devel openssl-devel zlib-devel gcc perl-ExtUtils-MakeMaker

上传git安装包，并解压：

cd /server/backup/gs/
    tar -zxvf git-2.26.2.tar.gz
    cd git-2.26.2
    make configure
    ./configure --prefix=/usr/local/git
    make && make install
    sudo echo "export PATH=$PATH:/usr/local/git/bin" >> /etc/profile
    source /etc/profile

验证Git是否安装成功：

输入git --version试试安装成功。

### Gitea安装 ###

创建git用户：

sudo useradd git

创建gitea，mysql用户密码，专门用于gitea本地访问：

mysql -u root -p
    Woshihenfuzademima$_$
    CREATE USER 'gitea'@'localhost' IDENTIFIED BY 'Woshihenfuzademima$_$';
    GRANT ALL PRIVILEGES ON *.* TO 'gitea'@'localhost'WITH GRANT OPTION;
    FLUSH PRIVILEGES;
    exit;
    # 高版本建库或者导入gitea.mysql.sql都会报错，建议手动建
    #SET GLOBAL innodb_file_per_table = ON,innodb_file_format = Barracuda,innodb_large_prefix = ON;                                                            
    # DROP DATABASE IF EXISTS gitea;                                                                   
    # CREATE DATABASE IF NOT EXISTS gitea CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;

手动创建数据库（导入gitea自带sql文件报错，0.13版本修复）：

新建数据库，这里建议直接新建数据库，设置好编码格式utf8mb4，上面我们不是用navicate测试远程链接了吗，最好使用客户端进行直接新建数据库gitea，

上传二进制文件。

mkdir /home/git/gitea
    chown -R git:git /home/git/gitea
    # wget -O gitea https://dl.gitea.io/gitea/1.12/gitea-1.12-linux-amd64
    mv /server/backup/gs/gitea-1.12-linux-amd64 /home/git/gitea/gitea
    chmod +x /home/git/gitea/gitea
    chown -R git:git /home/git/gitea/gitea

安装：

cd /home/git/gitea/
    su git
    ./gitea web --port 3001
    # 或者./gitea web  别问我为啥指定端口，因为3000占用了，或者你临时把3000停止
    211.149.239.182:3001
    59.110.21.159:3001

安装完成：根据页面填写参数：

APP_NAME = Git
    RUN_USER = git
    RUN_MODE = prod
    
    [oauth2]
    JWT_SECRET = 2n0Rpw8v2KZ4pnGeIPpQX5bLrhNepBOgMSg
    
    [security]
    INTERNAL_TOKEN = eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE1ODk5OTQwMzh9.5RMyVTbX4M5FycJOwtf8oO4DH87N38fHui-NbItoaVY
    INSTALL_LOCK   = true
    SECRET_KEY     = fZA30Uegc1Gt6pUTYBej7ahOoL7GPNR6Tl4ZgFkT3xgdkZuNLRJb3icWD
    
    [database]
    DB_TYPE  = mysql
    HOST     = 127.0.0.1:3306
    NAME     = gitea
    USER     = gitea
    PASSWD   = Woshihenfuzademima$_$
    SCHEMA   = 
    SSL_MODE = disable
    CHARSET  = utf8mb4
    PATH     = /home/git/gitea/data/gitea.db
    
    [repository]
    ROOT = /home/git/gitea-repositories
    
    [server]
    SSH_DOMAIN       = git.yourdomain.com
    DOMAIN           = git.yourdomain.com
    HTTP_PORT        = 3001
    ROOT_URL         = http://git.yourdomain.com:3001/
    DISABLE_SSH      = false
    SSH_PORT         = 22
    LFS_START_SERVER = true
    LFS_CONTENT_PATH = /home/git/gitea/data/lfs
    LFS_JWT_SECRET   = JGZ83tOyD4gcR5q3F6Odc7rajn_b3_mJdr_t2xEcKVQ
    OFFLINE_MODE     = false
    
    [mailer]
    ENABLED = false
    
    [service]
    REGISTER_EMAIL_CONFIRM            = false
    ENABLE_NOTIFY_MAIL                = false
    DISABLE_REGISTRATION              = false
    ALLOW_ONLY_EXTERNAL_REGISTRATION  = false
    ENABLE_CAPTCHA                    = false
    REQUIRE_SIGNIN_VIEW               = false
    DEFAULT_KEEP_EMAIL_PRIVATE        = false
    DEFAULT_ALLOW_CREATE_ORGANIZATION = true
    DEFAULT_ENABLE_TIMETRACKING       = true
    NO_REPLY_ADDRESS                  = noreply.localhost
    
    [picture]
    DISABLE_GRAVATAR        = false
    ENABLE_FEDERATED_AVATAR = true
    
    [openid]
    ENABLE_OPENID_SIGNIN = true
    ENABLE_OPENID_SIGNUP = true
    
    [session]
    PROVIDER = file
    
    [log]
    MODE      = file
    LEVEL     = info
    ROOT_PATH = /home/git/gitea/log

加入开机启动：su root（此处默认执行了以下，因为gogs有问题，怕也有问题）

ln -s /usr/local/git/bin/git /bin/git
    ln -s /usr/local/git/bin/git-upload-pack /bin/git-upload-pack
    ln -s /usr/local/git/bin/git-cvsserver /bin/git-cvsserver
    ln -s /usr/local/git/bin/gitk /bin/gitk
    ln -s /usr/local/git/bin/git-receive-pack /bin/git-receive-pack
    ln -s /usr/local/git/bin/git-shell /bin/git-shell
    ln -s /usr/local/git/bin/git-upload-archive /bin/git-upload-archive

https://github.com/go-gitea/gitea/blob/master/contrib/init/centos/gitea

# su root
    mkdir -p /home/git/gitea/myscripts/init/centos/
    vi /home/git/gitea/myscripts/init/centos/gitea
    文件内容下文。
    centOS6:
    cp /home/git/gitea/myscripts/init/centos/gitea /etc/rc.d/init.d/
    chmod a+x /etc/rc.d/init.d/gitea 
    chkconfig gitea on
    service gitea start    #启动服务
    service gitea stop     #停止服务
    service gitea restart  #重启服务
    ## 另一种临时启动可以进入安装目录~/gitea，执行：
    ./gitea web 不过这是关闭窗口就随之关闭

文本内容：

#!/bin/sh
    #
    #       /etc/rc.d/init.d/gitea
    #
    #       Runs the Gitea Git with a cup of tea.
    #
    #
    # chkconfig:   - 85 15
    #
    
    ### BEGIN INIT INFO
    # Provides:          gitea
    # Required-Start:    $remote_fs $syslog
    # Required-Stop:     $remote_fs $syslog
    # Default-Start:     2 3 4 5
    # Default-Stop:      0 1 6
    # Short-Description: Start gitea at boot time.
    # Description:       Control gitea.
    ### END INIT INFO
    
    # Source function library.
    . /etc/init.d/functions
    
    # Default values
    
    NAME=gitea
    GITEA_HOME=/home/git/${NAME}
    GITEA_PATH=/home/git/gitea/${NAME}
    GITEA_USER=git
    SERVICENAME="Gitea - Git with a cup of tea"
    LOCKFILE=/var/lock/subsys/gitea
    LOGPATH=${GITEA_HOME}/log
    LOGFILE=${LOGPATH}/gitea.log
    RETVAL=0
    
    # Read configuration from /etc/sysconfig/gitea to override defaults
    [ -r /etc/sysconfig/$NAME ] && . /etc/sysconfig/$NAME
    
    # Don't do anything if nothing is installed
    [ -x ${GITEA_PATH} ] || exit 0
    # exit if logpath dir is not created.
    [ -x ${LOGPATH} ] || exit 0
    
    DAEMON_OPTS="--check $NAME"
    
    # Set additional options, if any
    [ ! -z "$GITEA_USER" ] && DAEMON_OPTS="$DAEMON_OPTS --user=${GITEA_USER}"
    
    start() {
      cd ${GITEA_HOME}
      echo -n "Starting ${SERVICENAME}: "
      daemon $DAEMON_OPTS "${GITEA_PATH} web -c /home/git/gitea/custom/conf/app.ini > ${LOGFILE} 2>&1 &"
      RETVAL=$?
      echo
      [ $RETVAL = 0 ] && touch ${LOCKFILE}
    
      return $RETVAL
    }
    
    stop() {
      cd ${GITEA_HOME}
            echo -n "Shutting down ${SERVICENAME}: "
            killproc ${NAME}
            RETVAL=$?
            echo
            [ $RETVAL = 0 ] && rm -f ${LOCKFILE}
    }
    
    case "$1" in
        start)
            status ${NAME} > /dev/null 2>&1 && exit 0
            start
            ;;
        stop)
            stop
            ;;
        status)
            status ${NAME}
            ;;
        restart)
            stop
            start
            ;;
        reload)
            stop
            start
            ;;
        *)
            echo "Usage: ${NAME} {start|stop|status|restart}"
            exit 1
            ;;
    esac
    exit $RETVAL

### Nginx安装 ###

下载上传文件。

安装依赖：

yum -y install gcc zlib zlib-devel pcre-devel openssl openssl-devel

# 如果已经安装，卸载原来的Nginx
    find -name nginx
    yum -y remove nginx

解压安装：

# 解压
    cd /server/backup/gs/
    tar -vxf nginx-1.18.0.tar.gz
    cd nginx-1.18.0
    # 指定位置安装并且开启ssl
    ./configure --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module
    make && make install
    whereis nginx

安装完成截图：

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMxNzA4NzYz_size_16_color_FFFFFF_t_70 1]

配置环境变量：

vim /etc/profile
    ##### nginx #####
    export NGINX_HOME=/usr/local/nginx
    export PATH=$NGINX_HOME/sbin:$PATH
    # 使配置立即生效
    source /etc/profile
     
    # 测试是否生效
    echo $PATH
    /usr/local/nginx/sbin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin
    nginx -s reload
    nginx -v
    nginx -t

开机启动：

# 加入开机自启
    vi /etc/rc.local
    /usr/local/nginx/sbin/nginx
    chmod 755 /etc/rc.local
     
    # 测试配置文件
    /usr/local/nginx/sbin/nginx -t

### Nginx配置SSL ###

获取证书，上传服务器。

配置Nginx.cnf：`/usr/local/nginx/conf`

server_name  git.yourdomain.com;
     
           ssl_certificate      /usr/local/nginx/cert/_.shidongvr.com_chain.crt;
            ssl_certificate_key  /usr/local/nginx/cert/_.shidongvr.com_key.key;

INSTALL_LOCK = true
    SECRET_KEY   = Y81DPGiSppsWRED

### Nginx配置文件 ###

#user  nobody;
    worker_processes  1;
    
    #error_log  logs/error.log;
    #error_log  logs/error.log  notice;
    #error_log  logs/error.log  info;
    
    #pid        logs/nginx.pid;
    
    
    events {
        worker_connections  1024;
    }
    
    
    http {
        include       mime.types;
        default_type  application/octet-stream;
    
        #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
        #                  '$status $body_bytes_sent "$http_referer" '
        #                  '"$http_user_agent" "$http_x_forwarded_for"';
    
        #access_log  logs/access.log  main;
    
        sendfile        on;
        #tcp_nopush     on;
    
        #keepalive_timeout  0;
        keepalive_timeout  65;
    
        #gzip  on;
      client_max_body_size 1024M;
      client_body_buffer_size 10M;
                server {
           listen       443 ssl;
            server_name  git.yourdomain.com;
     
           ssl_certificate      /usr/local/nginx/cert/_.shidongvr.com_chain.crt;
            ssl_certificate_key  /usr/local/nginx/cert/_.shidongvr.com_key.key;
    
           ssl_session_cache    shared:SSL:1m;
            ssl_session_timeout  5m;
    
           ssl_ciphers  HIGH:!aNULL:!MD5;
           ssl_prefer_server_ciphers  on;
    
            location / {
             proxy_set_header Host $host:3001;
             proxy_set_header X-Real-IP $remote_addr;
    			proxy_pass   https://127.0.0.1:3001;
            }
            location /zhds {
    alias /home/zhds/1;
    index index.html;
            }
        }
    
    
        server {
            listen       80;
            server_name git.yourdomain.com;
    
            #charset koi8-r;
    
            #access_log  logs/host.access.log  main;
    
          #  location / {
    		#	proxy_pass   http://127.0.0.1:3000;
          #  }
    
    # 强制跳转https
       rewrite ^(.*) https://$server_name$1 permanent;
       
    
            error_page  404              /404.html;
    
            # redirect server error pages to the static page /50x.html
            #
            error_page   500 502 503 504  /50x.html;
            location = /50x.html {
                root   html;
            }
    
            # proxy the PHP scripts to Apache listening on 127.0.0.1:80
            #
            #location ~ \.php$ {
            #    proxy_pass   http://127.0.0.1;
            #}
    
            # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
            #
            #location ~ \.php$ {
            #    root           html;
            #    fastcgi_pass   127.0.0.1:9000;
            #    fastcgi_index  index.php;
            #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
            #    include        fastcgi_params;
            #}
    
            # deny access to .htaccess files, if Apache's document root
            # concurs with nginx's one
            #
            #location ~ /\.ht {
            #    deny  all;
            #}
        }
    
    
        server {
            listen       80;
            server_name nb.nogit.top;
    
            #charset koi8-r;
    
            #access_log  logs/host.access.log  main;
    
          location / {
    		#	proxy_pass   http://127.0.0.1:3000;
                root   /home/myblog/public;
                index   index.html;
          }
    
    # 强制跳转https
       rewrite ^(.*) https://$server_name$1 permanent;
       
    
            error_page  404              /404.html;
    
            # redirect server error pages to the static page /50x.html
            #
            error_page   500 502 503 504  /50x.html;
            location = /50x.html {
                root   html;
            }
    
            # proxy the PHP scripts to Apache listening on 127.0.0.1:80
            #
            #location ~ \.php$ {
            #    proxy_pass   http://127.0.0.1;
            #}
    
            # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
            #
            #location ~ \.php$ {
            #    root           html;
            #    fastcgi_pass   127.0.0.1:9000;
            #    fastcgi_index  index.php;
            #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
            #    include        fastcgi_params;
            #}
    
            # deny access to .htaccess files, if Apache's document root
            # concurs with nginx's one
            #
            #location ~ /\.ht {
            #    deny  all;
            #}
        }
    
    
        # another virtual host using mix of IP-, name-, and port-based configuration
        #
        #server {
        #    listen       8000;
        #    listen       somename:8080;
        #    server_name  somename  alias  another.alias;
    
        #    location / {
        #        root   html;
        #        index  index.html index.htm;
        #    }
        #}
    
    
        # HTTPS server
        #
        #server {
        #    listen       443 ssl;
        #    server_name  localhost;
    
        #    ssl_certificate      cert.pem;
        #    ssl_certificate_key  cert.key;
    
        #    ssl_session_cache    shared:SSL:1m;
        #    ssl_session_timeout  5m;
    
        #    ssl_ciphers  HIGH:!aNULL:!MD5;
        #    ssl_prefer_server_ciphers  on;
    
        #    location / {
        #        root   html;
        #        index  index.html index.htm;
        #    }
        #}
    
    
    }

### Gitea配置文件 ###

https://github.com/go-gitea/gitea/blob/master/custom/conf/app.ini.sample

https://docs.gitea.io/zh-cn/config-cheat-sheet/

# 应用名称，改成自己的或者公司名称
    APP_NAME = Git
    RUN_USER = git
    RUN_MODE = prod
    
    [repository]
    ROOT = /home/git/gitea-repositories
    # 强制所有仓库私有
    FORCE_PRIVATE = false
    # 全局最大每个用户创建的git工程数目， -1 表示都没限制，0超管不影响
    MAX_CREATION_LIMIT = 0
    # 禁用http，只能通过ssh协议操作
    DISABLE_HTTP_GIT = false
    
    [ui]
    # 默认主题
    DEFAULT_THEME = gitea
    # 主题，覆盖默认
    THEMES = gitea,arc-green
    
    [ui.meta]
    AUTHOR = Git
    DESCRIPTION = Hi PGZ!
    KEYWORDS = go,git,self-hosted,pgz
    
    [server]
    PROTOCOL = https
    DOMAIN           = git.yourdomain.com
    HTTP_PORT        = 3001
    ROOT_URL         = https://git.yourdomain.com/
    # 禁用SSH
    DISABLE_SSH      = false
    START_SSH_SERVER = false
    SSH_DOMAIN       = git.yourdomain.com
    SSH_PORT         = 22
    OFFLINE_MODE     = false
    CERT_FILE=/usr/local/nginx/cert/_.shidongvr.com_chain.crt
    KEY_FILE=/usr/local/nginx/cert/_.shidongvr.com_key.key
    # ENABLE_GZIP = true
    # Landing page, can be "home", "explore", "organizations" or "login"
    LANDING_PAGE = login
    LFS_START_SERVER = true
    LFS_CONTENT_PATH = /home/git/gitea/data/lfs
    LFS_JWT_SECRET   = JGZ83tOyD4gcR5q3F6Odc7rajn_b3_mJdr_t2xEcKVQ
    
    [database]
    DB_TYPE  = mysql
    HOST     = 127.0.0.1:3306
    NAME     = gitea
    USER     = gitea
    PASSWD   = Woshihenfuzademima$_$
    SCHEMA   = 
    # For MySQL, either "false" (default), "true", or "skip-verify"
    SSL_MODE = disable
    CHARSET  = utf8mb4
    PATH     = /home/git/gitea/data/gitea.db
    
    [admin]
    # 禁用普通用户创建组织
    DISABLE_REGULAR_ORG_CREATION = true
    
    [security]
    INTERNAL_TOKEN = eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE1ODk5OTQwMzh9.5RMyVTbX4M5FycJOwtf8oO4DH87N38fHui-NbItoaVY
    INSTALL_LOCK   = true
    SECRET_KEY     = fZA30Uegc1GtaHX9cNL6pUTYBej7ahOoL7GPNR6Tl4ZgFkT3xgdkZuNLRJb3icWD
    # How long to remember that a user is logged in before requiring relogin (in days)
    LOGIN_REMEMBER_DAYS = 7
    
    [openid]
    ENABLE_OPENID_SIGNIN = false
    ENABLE_OPENID_SIGNUP = false
    
    [service]
    # 登录验证码失效时间，单位分钟。
    # ACTIVE_CODE_LIVE_MINUTES = 180
    REGISTER_EMAIL_CONFIRM            = false
    # 是否发送工单创建等提醒邮件，需要 Mailer 被激活
    ENABLE_NOTIFY_MAIL                = false
    # 禁用注册，启用后只能用管理员添加用户
    DISABLE_REGISTRATION              = true
    ALLOW_ONLY_EXTERNAL_REGISTRATION  = false
    # 注册时使用图片验证码
    ENABLE_CAPTCHA                    = false
    # 是否所有页面都必须登录后才可访问
    REQUIRE_SIGNIN_VIEW               = true
    DEFAULT_KEEP_EMAIL_PRIVATE        = false
    DEFAULT_ALLOW_CREATE_ORGANIZATION = true
    DEFAULT_ENABLE_TIMETRACKING       = true
    NO_REPLY_ADDRESS                  = noreply.localhost
    # 是否显示注册按钮
    SHOW_REGISTRATION_BUTTON = false
    
    [mailer]
    ENABLED = false
    
    [session]
    # Session 内容存储方式，可选 memory, file, redis 或 mysql
    PROVIDER = file
    # 如果是文件，那么这里填根目录；其他的要填主机地址和端口。
    # PROVIDER_CONFIG = data/sessions
    
    [picture]
    # 开启则只使用内部头像
    DISABLE_GRAVATAR        = false
    ENABLE_FEDERATED_AVATAR = true
    
    [log]
    MODE      = file
    LEVEL     = info
    ROOT_PATH = /home/git/gitea/log
    
    [api]
    # Enables Swagger. True or false; default is true.
    ENABLE_SWAGGER = false
    
    [oauth2]
    # ENABLE = false
    JWT_SECRET = 2n0Rpw8v2KZ43D3V5nXzpnGeIPpQX5bLrhNepBOgMSg
    
    [other]
    SHOW_FOOTER_BRANDING = false
    SHOW_FOOTER_VERSION = false
    SHOW_FOOTER_TEMPLATE_LOAD_TIME = true

### 额外 ###

#### 卸载jdk（如果需要） ####

rpm -e --nodeps java_cup-0.10k-5.el6.x86_64
    rpm -e --nodeps java-1.5.0-gcj-1.5.0.0-29.1.el6.x86_64
    rpm -e --nodeps gcc-java-4.4.7-23.el6.x86_64

#### 配置gitea模板 ####

tips:简单配置，0.13后会移除首页footer部分。目前测试自定义模板暂时不管用，可采用直接更改源码，尽量微改动。

`/home/git/gitea/templates/base`

去掉顶部帮助链接：

mkdir -p /home/git/gitea/custom/templates/base
    更改并上传head_navbar.tmpl
    然后重启gitea

#### 禁止搜索引擎收录（可选） ####

默认情况下Gitea开启了搜索引擎收录（截止1.12版本官网doc），不过也无所谓，反正需要登录可看。

在`/home/git/gitea/custom`目录下新建文件`robots.txt`，

vi /home/git/gitea/custom/robots.txt

内容如下：

User-agent: *
    Disallow: /home/git/gitea/

#### Gitea自定义页面备份 ####

**提示：不同版本，文件内容不同，请使用相应版本！！！**

https://www.yuque.com/docs/share/290c267a-e455-4c3f-a9fc-54dfa45872d9?\#

#### Gitea的优势 ####

个人总结：低配也可运行、核心功能有，够用、社区活跃，更新快
    官网不完全横向对比：https://docs.gitea.io/zh-cn/comparison/

#### 软件包备用下载地址 ####

网盘有。链接：https://pan.baidu.com/s/17TlJyl7VzHzdYmWwo\_sVhQ  
提取码：1ihq

#### 成功截图 ####

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMxNzA4NzYz_size_16_color_FFFFFF_t_70 2]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMxNzA4NzYz_size_16_color_FFFFFF_t_70 3]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMxNzA4NzYz_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200513001356110.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMxNzA4NzYz,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMxNzA4NzYz_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200518141824676.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMxNzA4NzYz,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMxNzA4NzYz_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20200522134953197.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMxNzA4NzYz,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMxNzA4NzYz_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20200628195049835.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzMxNzA4NzYz,size_16,color_FFFFFF,t_70