1Index: custom/conf/app.example.ini
  2--- custom/conf/app.example.ini.orig
  3+++ custom/conf/app.example.ini
  4@@ -47,7 +47,7 @@
  5 APP_NAME = ; Gitea: Git with a cup of tea
  6 ;;
  7 ;; RUN_USER will automatically detect the current user - but you can set it here change it if you run locally
  8-RUN_USER = ; git
  9+RUN_USER = ; _forgejo
 10 ;;
 11 ;; Application run mode, affects performance and debugging. Either "dev", "prod" or "test", default is "prod"
 12 RUN_MODE = ; prod
 13@@ -149,7 +149,7 @@ RUN_MODE = ; prod
 14 ;SSH_LISTEN_HOST =
 15 ;;
 16 ;; Port number to be exposed in clone URL
 17-;SSH_PORT = 22
 18+SSH_PORT = 
 19 ;;
 20 ;; The port number the builtin SSH server should listen on
 21 ;SSH_LISTEN_PORT = %(SSH_PORT)s
 22@@ -278,7 +278,7 @@ RUN_MODE = ; prod
 23 ;STATIC_ROOT_PATH = ; Will default to the built-in value _`StaticRootPath`_
 24 ;;
 25 ;; Default path for App data
 26-;APP_DATA_PATH = data ; relative paths will be made absolute with _`AppWorkPath`_
 27+APP_DATA_PATH = ${LOCALSTATEDIR}/forgejo/data
 28 ;;
 29 ;; Enable gzip compression for runtime-generated content, static resources excluded
 30 ;ENABLE_GZIP = false
 31@@ -289,7 +289,7 @@ RUN_MODE = ; prod
 32 ;ENABLE_PPROF = false
 33 ;;
 34 ;; PPROF_DATA_PATH, use an absolute path when you start gitea as service
 35-;PPROF_DATA_PATH = data/tmp/pprof ; Path is relative to _`AppWorkPath`_
 36+PPROF_DATA_PATH = ${LOCALSTATEDIR}/forgejo/data/tmp/pprof
 37 ;;
 38 ;; Landing page, can be "home", "explore", "organizations", "login", or any URL such as "/org/repo" or even "https://anotherwebsite.com"
 39 ;; The "login" choice is not a security measure but just a UI flow change, use REQUIRE_SIGNIN_VIEW to force users to log in.
 40@@ -338,10 +338,10 @@ LFS_JWT_SECRET =
 41 ;;
 42 ;; MySQL Configuration
 43 ;;
 44-DB_TYPE = mysql
 45-HOST = 127.0.0.1:3306 ; can use socket e.g. /var/run/mysqld/mysqld.sock
 46-NAME = gitea
 47-USER = root
 48+;DB_TYPE = mysql
 49+;HOST = 127.0.0.1:3306 ; can use socket e.g. /var/run/mysqld/mysqld.sock
 50+;NAME = gitea
 51+;USER = root
 52 ;PASSWD = ;Use PASSWD = `your password` for quoting if you use special characters in the password.
 53 ;SSL_MODE = false ; either "false" (default), "true", or "skip-verify"
 54 ;CHARSET = utf8mb4 ;either "utf8" or "utf8mb4", default is "utf8mb4".
 55@@ -364,8 +364,8 @@ USER = root
 56 ;;
 57 ;; SQLite Configuration
 58 ;;
 59-;DB_TYPE = sqlite3
 60-;PATH= ; defaults to data/forgejo.db
 61+DB_TYPE = sqlite3
 62+PATH = ${LOCALSTATEDIR}/forgejo/data/forgejo.db
 63 ;SQLITE_TIMEOUT = ; Query timeout defaults to: 500
 64 ;SQLITE_JOURNAL_MODE = ; defaults to sqlite database default (often DELETE), can be used to enable WAL mode. https://www.sqlite.org/pragma.html#pragma_journal_mode
 65 ;;
 66@@ -521,7 +521,7 @@ ENABLE = true
 67 ;; Private key file path used to sign OAuth2 tokens. The path is relative to APP_DATA_PATH.
 68 ;; This setting is only needed if JWT_SIGNING_ALGORITHM is set to RS256, RS384, RS512, ES256, ES384 or ES512.
 69 ;; The file must contain a RSA or ECDSA private key in the PKCS8 format. If no key exists a 4096 bit key will be created for you.
 70-;JWT_SIGNING_PRIVATE_KEY_FILE = jwt/private.pem
 71+JWT_SIGNING_PRIVATE_KEY_FILE = ${LOCALSTATEDIR}/forgejo/jwt/private.pem
 72 ;;
 73 ;; OAuth2 authentication secret for access and refresh tokens, change this yourself to a unique string. CLI generate option is helpful in this case. https://docs.gitea.io/en-us/command-line/#generate
 74 ;; This setting is only needed if JWT_SIGNING_ALGORITHM is set to HS256, HS384 or HS512.
 75@@ -545,14 +545,14 @@ ENABLE = true
 76 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 77 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 78 ;; Root path for the log files - defaults to %(GITEA_WORK_DIR)/log
 79-;ROOT_PATH =
 80+ROOT_PATH = ${LOCALSTATEDIR}/log/forgejo
 81 ;;
 82 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 83 ;; Main Logger
 84 ;;
 85 ;; Either "console", "file", "conn", "smtp" or "database", default is "console"
 86 ;; Use comma to separate multiple modes, e.g. "console, file"
 87-MODE = console
 88+MODE = file
 89 ;;
 90 ;; Either "Trace", "Debug", "Info", "Warn", "Error", "Critical" or "None", default is "Info"
 91 LEVEL = Info
 92@@ -734,7 +734,7 @@ ROUTER = console
 93 ;EMAIL_DOMAIN_BLOCKLIST =
 94 ;;
 95 ;; Disallow registration, only allow admins to create accounts.
 96-;DISABLE_REGISTRATION = false
 97+DISABLE_REGISTRATION = true
 98 ;;
 99 ;; Allow registration only using gitea itself, it works only when DISABLE_REGISTRATION is false
100 ;ALLOW_ONLY_INTERNAL_REGISTRATION = false
101@@ -743,7 +743,7 @@ ROUTER = console
102 ;ALLOW_ONLY_EXTERNAL_REGISTRATION = false
103 ;;
104 ;; User must sign in to view anything.
105-;REQUIRE_SIGNIN_VIEW = false
106+REQUIRE_SIGNIN_VIEW = true
107 ;;
108 ;; Mail notification
109 ;ENABLE_NOTIFY_MAIL = false
110@@ -793,11 +793,11 @@ ROUTER = console
111 ;;
112 ;; Default value for KeepEmailPrivate
113 ;; Each new user will get the value of this setting copied into their profile
114-;DEFAULT_KEEP_EMAIL_PRIVATE = false
115+DEFAULT_KEEP_EMAIL_PRIVATE = true
116 ;;
117 ;; Default value for AllowCreateOrganization
118 ;; Every new user will have rights set to create organizations depending on this setting
119-;DEFAULT_ALLOW_CREATE_ORGANIZATION = true
120+DEFAULT_ALLOW_CREATE_ORGANIZATION = false
121 ;; Default value for IsRestricted
122 ;; Every new user will have restricted permissions depending on this setting
123 ;DEFAULT_USER_IS_RESTRICTED = false
124@@ -806,7 +806,7 @@ ROUTER = console
125 ;; Limited is for users visible only to signed users
126 ;; Private is for users visible only to members of their organizations
127 ;; Public is for users visible for everyone
128-;DEFAULT_USER_VISIBILITY = public
129+DEFAULT_USER_VISIBILITY = private
130 ;;
131 ;; Set which visibility modes a user can have
132 ;ALLOWED_USER_VISIBILITY_MODES = public,limited,private
133@@ -815,7 +815,7 @@ ROUTER = console
134 ;; Limited is for organizations visible only to signed users
135 ;; Private is for organizations visible only to members of the organization
136 ;; Public is for organizations visible to everyone
137-;DEFAULT_ORG_VISIBILITY = public
138+DEFAULT_ORG_VISIBILITY = private
139 ;;
140 ;; Default value for DefaultOrgMemberVisible
141 ;; True will make the membership of the users visible when added to the organisation
142@@ -880,14 +880,14 @@ ROUTER = console
143 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
144 
145 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
146-;[repository]
147+[repository]
148 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
149 ;; Root path for storing all repository data. By default, it is set to %(APP_DATA_PATH)s/gitea-repositories.
150 ;; A relative path is interpreted as _`AppWorkPath`_/%(ROOT)s
151-;ROOT =
152+ROOT = ${LOCALSTATEDIR}/forgejo/forgejo-repositories
153 ;;
154 ;; The script type this server supports. Usually this is `bash`, but some users report that only `sh` is available.
155-;SCRIPT_TYPE = bash
156+SCRIPT_TYPE = sh
157 ;;
158 ;; DETECTED_CHARSETS_ORDER tie-break order for detected charsets.
159 ;; If the charsets have equal confidence, tie-breaking will be done by order in this list
160@@ -902,7 +902,7 @@ ROUTER = console
161 ;FORCE_PRIVATE = false
162 ;;
163 ;; Default privacy setting when creating a new repository, allowed values: last, private, public. Default is last which means the last setting used.
164-;DEFAULT_PRIVATE = last
165+DEFAULT_PRIVATE = private
166 ;;
167 ;; Default private when using push-to-create
168 ;DEFAULT_PUSH_CREATE_PRIVATE = true
169@@ -918,7 +918,7 @@ ROUTER = console
170 ;;
171 ;; Preferred Licenses to place at the top of the List
172 ;; The name here must match the filename in options/license or custom/options/license
173-;PREFERRED_LICENSES = Apache License 2.0,MIT License
174+PREFERRED_LICENSES = BSD-2-Clause,ISC; Apache License 2.0,MIT License
175 ;;
176 ;; Disable the ability to interact with repositories using the HTTP protocol
177 ;DISABLE_HTTP_GIT = false
178@@ -984,16 +984,16 @@ ROUTER = console
179 
180 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
181 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
182-;[repository.local]
183+[repository.local]
184 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
185 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
186 ;;
187 ;; Path for local repository copy. Defaults to `tmp/local-repo` (content gets deleted on gitea restart)
188-;LOCAL_COPY_PATH = tmp/local-repo
189+LOCAL_COPY_PATH = ${LOCALSTATEDIR}/forgejo/tmp/local-repo
190 
191 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
192 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
193-;[repository.upload]
194+[repository.upload]
195 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
196 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
197 ;;
198@@ -1001,7 +1001,7 @@ ROUTER = console
199 ;ENABLED = true
200 ;;
201 ;; Path for uploads. Defaults to `data/tmp/uploads` (content gets deleted on gitea restart)
202-;TEMP_PATH = data/tmp/uploads
203+TEMP_PATH = ${LOCALSTATEDIR}/forgejo/data/tmp/uploads
204 ;;
205 ;; Comma-separated list of allowed file extensions (`.zip`), mime types (`text/plain`) or wildcard type (`image/*`, `audio/*`, `video/*`). Empty value or `*/*` allows all types.
206 ;ALLOWED_TYPES =
207@@ -1166,7 +1166,7 @@ ROUTER = console
208 
209 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
210 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
211-;[ui]
212+[ui]
213 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
214 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
215 ;;
216@@ -1200,7 +1200,7 @@ ROUTER = console
217 ;MAX_DISPLAY_FILE_SIZE = 8388608
218 ;;
219 ;; Whether the email of the user should be shown in the Explore Users page
220-;SHOW_USER_EMAIL = true
221+SHOW_USER_EMAIL = false
222 ;;
223 ;; Set the default theme for the Gitea install
224 ;DEFAULT_THEME = auto
225@@ -1342,7 +1342,7 @@ ROUTER = console
226 
227 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
228 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
229-;[indexer]
230+[indexer]
231 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
232 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
233 ;;
234@@ -1353,7 +1353,7 @@ ROUTER = console
235 ;ISSUE_INDEXER_TYPE = bleve
236 ;;
237 ;; Issue indexer storage path, available when ISSUE_INDEXER_TYPE is bleve
238-;ISSUE_INDEXER_PATH = indexers/issues.bleve ; Relative paths will be made absolute against _`AppWorkPath`_.
239+ISSUE_INDEXER_PATH = ${LOCALSTATEDIR}/forgejo/indexers/issues.bleve
240 ;;
241 ;; Issue indexer connection string, available when ISSUE_INDEXER_TYPE is elasticsearch
242 ;ISSUE_INDEXER_CONN_STR = http://elastic:changeme@localhost:9200
243@@ -1371,7 +1371,7 @@ ROUTER = console
244 ;; When ISSUE_INDEXER_QUEUE_TYPE is levelqueue, this will be the path where the queue will be saved.
245 ;; This can be overridden by `ISSUE_INDEXER_QUEUE_CONN_STR`.
246 ;; default is queues/common
247-;ISSUE_INDEXER_QUEUE_DIR = queues/common; **DEPRECATED** use settings in `[queue.issue_indexer]`. Relative paths will be made absolute against `%(APP_DATA_PATH)s`.
248+ISSUE_INDEXER_QUEUE_DIR = ${LOCALSTATEDIR}/forgejo/indexers/issues.queue
249 ;;
250 ;; When `ISSUE_INDEXER_QUEUE_TYPE` is `redis`, this will store the redis connection string.
251 ;; When `ISSUE_INDEXER_QUEUE_TYPE` is `levelqueue`, this is a directory or additional options of
252@@ -1392,7 +1392,7 @@ ROUTER = console
253 ;REPO_INDEXER_TYPE = bleve
254 ;;
255 ;; Index file used for code search. available when `REPO_INDEXER_TYPE` is bleve
256-;REPO_INDEXER_PATH = indexers/repos.bleve
257+REPO_INDEXER_PATH = ${LOCALSTATEDIR}/forgejo/indexers/repos.bleve
258 ;;
259 ;; Code indexer connection string, available when `REPO_INDEXER_TYPE` is elasticsearch. i.e. http://elastic:changeme@localhost:9200
260 ;REPO_INDEXER_CONN_STR =
261@@ -1472,19 +1472,19 @@ ROUTER = console
262 
263 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
264 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
265-;[admin]
266+[admin]
267 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
268 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
269 ;;
270 ;; Disallow regular (non-admin) users from creating organizations.
271-;DISABLE_REGULAR_ORG_CREATION = false
272+DISABLE_REGULAR_ORG_CREATION = true
273 ;;
274 ;; Default configuration for email notifications for users (user configurable). Options: enabled, onmention, disabled
275 ;DEFAULT_EMAIL_NOTIFICATIONS = enabled
276 
277 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
278 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
279-;[openid]
280+[openid]
281 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
282 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
283 ;;
284@@ -1505,7 +1505,7 @@ ROUTER = console
285 ;;  - <username>.livejournal.com
286 ;;
287 ;; Whether to allow signin in via OpenID
288-;ENABLE_OPENID_SIGNIN = true
289+ENABLE_OPENID_SIGNIN = false
290 ;;
291 ;; Whether to allow registering via OpenID
292 ;; Do not include to rely on rhw DISABLE_REGISTRATION setting
293@@ -1590,7 +1590,7 @@ ROUTER = console
294 
295 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
296 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
297-;[mailer]
298+[mailer]
299 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
300 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
301 ;;
302@@ -1613,12 +1613,12 @@ ROUTER = console
303 ;; If your provider does not explicitly say which protocol it uses but does provide a port,
304 ;; you can set SMTP_PORT instead and this will be inferred.
305 ;; (Before 1.18, see the notice, this was controlled via MAILER_TYPE and IS_TLS_ENABLED.)
306-;PROTOCOL =
307+PROTOCOL = smtp
308 ;;
309 ;; Mail server address, e.g. smtp.gmail.com.
310 ;; For smtp+unix, this should be a path to a unix socket instead.
311 ;; (Before 1.18, see the notice, this was combined with SMTP_PORT as HOST.)
312-;SMTP_ADDR =
313+SMTP_ADDR = localhost:25
314 ;;
315 ;; Mail server port. Common ports are:
316 ;;   25:  insecure SMTP
317@@ -1641,11 +1641,11 @@ ROUTER = console
318 ;;
319 ;; Use client certificate in connection.
320 ;USE_CLIENT_CERT = false
321-;CLIENT_CERT_FILE = custom/mailer/cert.pem
322-;CLIENT_KEY_FILE = custom/mailer/key.pem
323+;CLIENT_CERT_FILE = ${LOCALSTATEDIR}/forgejo/custom/mailer/cert.pem
324+;CLIENT_KEY_FILE = ${LOCALSTATEDIR}/forgejo/custom/mailer/key.pem
325 ;;
326 ;; Mail from address, RFC 5322. This can be just an email address, or the `"Name" <email@example.com>` format
327-;FROM =
328+FROM = forgejo@%(DOMAIN)s
329 ;;
330 ;; Sometimes it is helpful to use a different address on the envelope. Set this to use ENVELOPE_FROM as the from on the envelope. Set to `<>` to send an empty address.
331 ;ENVELOPE_FROM =
332@@ -1657,10 +1657,10 @@ ROUTER = console
333 ;PASSWD =
334 ;;
335 ;; Send mails only in plain text, without HTML alternative
336-;SEND_AS_PLAIN_TEXT = false
337+SEND_AS_PLAIN_TEXT = true
338 ;;
339 ;; Specify an alternative sendmail binary
340-;SENDMAIL_PATH = sendmail
341+SENDMAIL_PATH = /usr/sbin/sendmail
342 ;;
343 ;; Specify any extra sendmail arguments
344 ;; WARNING: if your sendmail program interprets options you should set this to "--" or terminate these args with "--"
345@@ -1757,20 +1757,20 @@ ROUTER = console
346 
347 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
348 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
349-;[session]
350+[session]
351 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
352 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
353 ;;
354 ;; Either "memory", "file", "redis", "db", "mysql", "couchbase", "memcache" or "postgres"
355 ;; Default is "memory". "db" will reuse the configuration in [database]
356-;PROVIDER = memory
357+PROVIDER = file
358 ;;
359 ;; Provider config options
360 ;; memory: doesn't have any config yet
361 ;; file: session file path, e.g. `data/sessions`
362 ;; redis: `redis://127.0.0.1:6379/0?pool_size=100&idle_timeout=180s`
363 ;; mysql: go-sql-driver/mysql dsn config string, e.g. `root:password@/session_table`
364-;PROVIDER_CONFIG = data/sessions ; Relative paths will be made absolute against _`AppWorkPath`_.
365+PROVIDER_CONFIG = ${LOCALSTATEDIR}/forgejo/data/sessions
366 ;;
367 ;; Session cookie name
368 ;COOKIE_NAME = i_like_gitea
369@@ -1789,12 +1789,12 @@ ROUTER = console
370 
371 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
372 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
373-;[picture]
374+[picture]
375 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
376 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
377 ;;
378-;AVATAR_UPLOAD_PATH = data/avatars
379-;REPOSITORY_AVATAR_UPLOAD_PATH = data/repo-avatars
380+AVATAR_UPLOAD_PATH = ${LOCALSTATEDIR}/forgejo/data/avatars
381+;REPOSITORY_AVATAR_UPLOAD_PATH = ${LOCALSTATEDIR}/forgejo/data/repo-avatars
382 ;;
383 ;; How Gitea deals with missing repository avatars
384 ;; none = no avatar will be displayed; random = random avatar will be displayed; image = default image will be used
385@@ -1819,7 +1819,7 @@ ROUTER = console
386 ;GRAVATAR_SOURCE = gravatar
387 ;;
388 ;; This value will always be true in offline mode.
389-;DISABLE_GRAVATAR = false
390+DISABLE_GRAVATAR = true
391 ;;
392 ;; Federated avatar lookup uses DNS to discover avatar associated
393 ;; with emails, see https://www.libravatar.org
394@@ -1828,7 +1828,7 @@ ROUTER = console
395 
396 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
397 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
398-;[attachment]
399+[attachment]
400 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
401 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
402 ;;
403@@ -1853,7 +1853,7 @@ ROUTER = console
404 ;SERVE_DIRECT = false
405 ;;
406 ;; Path for attachments. Defaults to `data/attachments` only available when STORAGE_TYPE is `local`
407-;PATH = data/attachments
408+PATH = ${LOCALSTATEDIR}/forgejo/data/attachments
409 ;;
410 ;; Minio endpoint to connect only available when STORAGE_TYPE is `minio`
411 ;MINIO_ENDPOINT = localhost:9000
412@@ -1884,14 +1884,14 @@ ROUTER = console
413 
414 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
415 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
416-;[time]
417+[time]
418 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
419 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
420 ;;
421 ;; Specifies the format for fully outputted dates. Defaults to RFC1123
422 ;; Special supported values are ANSIC, UnixDate, RubyDate, RFC822, RFC822Z, RFC850, RFC1123, RFC1123Z, RFC3339, RFC3339Nano, Kitchen, Stamp, StampMilli, StampMicro and StampNano
423 ;; For more information about the format see http://golang.org/pkg/time/#pkg-constants
424-;FORMAT =
425+FORMAT = RFC1123Z
426 ;;
427 ;; Location the UI time display i.e. Asia/Shanghai
428 ;; Empty means server's location setting
429@@ -2326,14 +2326,14 @@ ROUTER = console
430 
431 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
432 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
433-;[other]
434+[other]
435 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
436 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
437 ;SHOW_FOOTER_BRANDING = false
438 ;; Show version information about Gitea and Go in the footer
439-;SHOW_FOOTER_VERSION = true
440+SHOW_FOOTER_VERSION = false
441 ;; Show template execution time in the footer
442-;SHOW_FOOTER_TEMPLATE_LOAD_TIME = true
443+SHOW_FOOTER_TEMPLATE_LOAD_TIME = false
444 ;; Generate sitemap. Defaults to `true`.
445 ;ENABLE_SITEMAP = true
446 ;; Enable/Disable RSS/Atom feed
447@@ -2474,7 +2474,7 @@ ROUTER = console
448 ;ENABLED = true
449 ;;
450 ;; Path for chunked uploads. Defaults to APP_DATA_PATH + `tmp/package-upload`
451-;CHUNKED_UPLOAD_PATH = tmp/package-upload
452+CHUNKED_UPLOAD_PATH = ${LOCALSTATEDIR}/forgejo/data/tmp/package-upload
453 ;;
454 ;; Maximum count of package versions a single owner can have (`-1` means no limits)
455 ;LIMIT_TOTAL_OWNER_COUNT = -1
456@@ -2539,7 +2539,7 @@ ROUTER = console
457 ;STORAGE_TYPE = local
458 ;;
459 ;; Where your lfs files reside, default is data/lfs.
460-;PATH = data/lfs
461+PATH = ${LOCALSTATEDIR}/forgejo/data/lfs
462 
463 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
464 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;