aboutsummaryrefslogtreecommitdiffstats
path: root/www/forgejo/patches/patch-custom_conf_app_example_ini
diff options
context:
space:
mode:
Diffstat (limited to 'www/forgejo/patches/patch-custom_conf_app_example_ini')
-rw-r--r--www/forgejo/patches/patch-custom_conf_app_example_ini464
1 files changed, 464 insertions, 0 deletions
diff --git a/www/forgejo/patches/patch-custom_conf_app_example_ini b/www/forgejo/patches/patch-custom_conf_app_example_ini
new file mode 100644
index 0000000..6a5b817
--- /dev/null
+++ b/www/forgejo/patches/patch-custom_conf_app_example_ini
@@ -0,0 +1,464 @@
+Index: custom/conf/app.example.ini
+--- custom/conf/app.example.ini.orig
++++ custom/conf/app.example.ini
+@@ -47,7 +47,7 @@
+ APP_NAME = ; Gitea: Git with a cup of tea
+ ;;
+ ;; RUN_USER will automatically detect the current user - but you can set it here change it if you run locally
+-RUN_USER = ; git
++RUN_USER = ; _forgejo
+ ;;
+ ;; Application run mode, affects performance and debugging. Either "dev", "prod" or "test", default is "prod"
+ RUN_MODE = ; prod
+@@ -149,7 +149,7 @@ RUN_MODE = ; prod
+ ;SSH_LISTEN_HOST =
+ ;;
+ ;; Port number to be exposed in clone URL
+-;SSH_PORT = 22
++SSH_PORT =
+ ;;
+ ;; The port number the builtin SSH server should listen on
+ ;SSH_LISTEN_PORT = %(SSH_PORT)s
+@@ -278,7 +278,7 @@ RUN_MODE = ; prod
+ ;STATIC_ROOT_PATH = ; Will default to the built-in value _`StaticRootPath`_
+ ;;
+ ;; Default path for App data
+-;APP_DATA_PATH = data ; relative paths will be made absolute with _`AppWorkPath`_
++APP_DATA_PATH = ${LOCALSTATEDIR}/forgejo/data
+ ;;
+ ;; Enable gzip compression for runtime-generated content, static resources excluded
+ ;ENABLE_GZIP = false
+@@ -289,7 +289,7 @@ RUN_MODE = ; prod
+ ;ENABLE_PPROF = false
+ ;;
+ ;; PPROF_DATA_PATH, use an absolute path when you start gitea as service
+-;PPROF_DATA_PATH = data/tmp/pprof ; Path is relative to _`AppWorkPath`_
++PPROF_DATA_PATH = ${LOCALSTATEDIR}/forgejo/data/tmp/pprof
+ ;;
+ ;; Landing page, can be "home", "explore", "organizations", "login", or any URL such as "/org/repo" or even "https://anotherwebsite.com"
+ ;; The "login" choice is not a security measure but just a UI flow change, use REQUIRE_SIGNIN_VIEW to force users to log in.
+@@ -338,10 +338,10 @@ LFS_JWT_SECRET =
+ ;;
+ ;; MySQL Configuration
+ ;;
+-DB_TYPE = mysql
+-HOST = 127.0.0.1:3306 ; can use socket e.g. /var/run/mysqld/mysqld.sock
+-NAME = gitea
+-USER = root
++;DB_TYPE = mysql
++;HOST = 127.0.0.1:3306 ; can use socket e.g. /var/run/mysqld/mysqld.sock
++;NAME = gitea
++;USER = root
+ ;PASSWD = ;Use PASSWD = `your password` for quoting if you use special characters in the password.
+ ;SSL_MODE = false ; either "false" (default), "true", or "skip-verify"
+ ;CHARSET = utf8mb4 ;either "utf8" or "utf8mb4", default is "utf8mb4".
+@@ -364,8 +364,8 @@ USER = root
+ ;;
+ ;; SQLite Configuration
+ ;;
+-;DB_TYPE = sqlite3
+-;PATH= ; defaults to data/forgejo.db
++DB_TYPE = sqlite3
++PATH = ${LOCALSTATEDIR}/forgejo/data/forgejo.db
+ ;SQLITE_TIMEOUT = ; Query timeout defaults to: 500
+ ;SQLITE_JOURNAL_MODE = ; defaults to sqlite database default (often DELETE), can be used to enable WAL mode. https://www.sqlite.org/pragma.html#pragma_journal_mode
+ ;;
+@@ -521,7 +521,7 @@ ENABLE = true
+ ;; Private key file path used to sign OAuth2 tokens. The path is relative to APP_DATA_PATH.
+ ;; This setting is only needed if JWT_SIGNING_ALGORITHM is set to RS256, RS384, RS512, ES256, ES384 or ES512.
+ ;; The file must contain a RSA or ECDSA private key in the PKCS8 format. If no key exists a 4096 bit key will be created for you.
+-;JWT_SIGNING_PRIVATE_KEY_FILE = jwt/private.pem
++JWT_SIGNING_PRIVATE_KEY_FILE = ${LOCALSTATEDIR}/forgejo/jwt/private.pem
+ ;;
+ ;; OAuth2 authentication secret for access and refresh tokens, change this yourself to a unique string. CLI generate option is helpful in this case. https://docs.gitea.io/en-us/command-line/#generate
+ ;; This setting is only needed if JWT_SIGNING_ALGORITHM is set to HS256, HS384 or HS512.
+@@ -545,14 +545,14 @@ ENABLE = true
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;; Root path for the log files - defaults to %(GITEA_WORK_DIR)/log
+-;ROOT_PATH =
++ROOT_PATH = ${LOCALSTATEDIR}/log/forgejo
+ ;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;; Main Logger
+ ;;
+ ;; Either "console", "file", "conn", "smtp" or "database", default is "console"
+ ;; Use comma to separate multiple modes, e.g. "console, file"
+-MODE = console
++MODE = file
+ ;;
+ ;; Either "Trace", "Debug", "Info", "Warn", "Error", "Critical" or "None", default is "Info"
+ LEVEL = Info
+@@ -734,7 +734,7 @@ ROUTER = console
+ ;EMAIL_DOMAIN_BLOCKLIST =
+ ;;
+ ;; Disallow registration, only allow admins to create accounts.
+-;DISABLE_REGISTRATION = false
++DISABLE_REGISTRATION = true
+ ;;
+ ;; Allow registration only using gitea itself, it works only when DISABLE_REGISTRATION is false
+ ;ALLOW_ONLY_INTERNAL_REGISTRATION = false
+@@ -743,7 +743,7 @@ ROUTER = console
+ ;ALLOW_ONLY_EXTERNAL_REGISTRATION = false
+ ;;
+ ;; User must sign in to view anything.
+-;REQUIRE_SIGNIN_VIEW = false
++REQUIRE_SIGNIN_VIEW = true
+ ;;
+ ;; Mail notification
+ ;ENABLE_NOTIFY_MAIL = false
+@@ -793,11 +793,11 @@ ROUTER = console
+ ;;
+ ;; Default value for KeepEmailPrivate
+ ;; Each new user will get the value of this setting copied into their profile
+-;DEFAULT_KEEP_EMAIL_PRIVATE = false
++DEFAULT_KEEP_EMAIL_PRIVATE = true
+ ;;
+ ;; Default value for AllowCreateOrganization
+ ;; Every new user will have rights set to create organizations depending on this setting
+-;DEFAULT_ALLOW_CREATE_ORGANIZATION = true
++DEFAULT_ALLOW_CREATE_ORGANIZATION = false
+ ;; Default value for IsRestricted
+ ;; Every new user will have restricted permissions depending on this setting
+ ;DEFAULT_USER_IS_RESTRICTED = false
+@@ -806,7 +806,7 @@ ROUTER = console
+ ;; Limited is for users visible only to signed users
+ ;; Private is for users visible only to members of their organizations
+ ;; Public is for users visible for everyone
+-;DEFAULT_USER_VISIBILITY = public
++DEFAULT_USER_VISIBILITY = private
+ ;;
+ ;; Set which visibility modes a user can have
+ ;ALLOWED_USER_VISIBILITY_MODES = public,limited,private
+@@ -815,7 +815,7 @@ ROUTER = console
+ ;; Limited is for organizations visible only to signed users
+ ;; Private is for organizations visible only to members of the organization
+ ;; Public is for organizations visible to everyone
+-;DEFAULT_ORG_VISIBILITY = public
++DEFAULT_ORG_VISIBILITY = private
+ ;;
+ ;; Default value for DefaultOrgMemberVisible
+ ;; True will make the membership of the users visible when added to the organisation
+@@ -880,14 +880,14 @@ ROUTER = console
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[repository]
++[repository]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;; Root path for storing all repository data. By default, it is set to %(APP_DATA_PATH)s/gitea-repositories.
+ ;; A relative path is interpreted as _`AppWorkPath`_/%(ROOT)s
+-;ROOT =
++ROOT = ${LOCALSTATEDIR}/forgejo/forgejo-repositories
+ ;;
+ ;; The script type this server supports. Usually this is `bash`, but some users report that only `sh` is available.
+-;SCRIPT_TYPE = bash
++SCRIPT_TYPE = sh
+ ;;
+ ;; DETECTED_CHARSETS_ORDER tie-break order for detected charsets.
+ ;; If the charsets have equal confidence, tie-breaking will be done by order in this list
+@@ -902,7 +902,7 @@ ROUTER = console
+ ;FORCE_PRIVATE = false
+ ;;
+ ;; Default privacy setting when creating a new repository, allowed values: last, private, public. Default is last which means the last setting used.
+-;DEFAULT_PRIVATE = last
++DEFAULT_PRIVATE = private
+ ;;
+ ;; Default private when using push-to-create
+ ;DEFAULT_PUSH_CREATE_PRIVATE = true
+@@ -918,7 +918,7 @@ ROUTER = console
+ ;;
+ ;; Preferred Licenses to place at the top of the List
+ ;; The name here must match the filename in options/license or custom/options/license
+-;PREFERRED_LICENSES = Apache License 2.0,MIT License
++PREFERRED_LICENSES = BSD-2-Clause,ISC; Apache License 2.0,MIT License
+ ;;
+ ;; Disable the ability to interact with repositories using the HTTP protocol
+ ;DISABLE_HTTP_GIT = false
+@@ -984,16 +984,16 @@ ROUTER = console
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[repository.local]
++[repository.local]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;
+ ;; Path for local repository copy. Defaults to `tmp/local-repo` (content gets deleted on gitea restart)
+-;LOCAL_COPY_PATH = tmp/local-repo
++LOCAL_COPY_PATH = ${LOCALSTATEDIR}/forgejo/tmp/local-repo
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[repository.upload]
++[repository.upload]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;
+@@ -1001,7 +1001,7 @@ ROUTER = console
+ ;ENABLED = true
+ ;;
+ ;; Path for uploads. Defaults to `data/tmp/uploads` (content gets deleted on gitea restart)
+-;TEMP_PATH = data/tmp/uploads
++TEMP_PATH = ${LOCALSTATEDIR}/forgejo/data/tmp/uploads
+ ;;
+ ;; Comma-separated list of allowed file extensions (`.zip`), mime types (`text/plain`) or wildcard type (`image/*`, `audio/*`, `video/*`). Empty value or `*/*` allows all types.
+ ;ALLOWED_TYPES =
+@@ -1166,7 +1166,7 @@ ROUTER = console
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[ui]
++[ui]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;
+@@ -1200,7 +1200,7 @@ ROUTER = console
+ ;MAX_DISPLAY_FILE_SIZE = 8388608
+ ;;
+ ;; Whether the email of the user should be shown in the Explore Users page
+-;SHOW_USER_EMAIL = true
++SHOW_USER_EMAIL = false
+ ;;
+ ;; Set the default theme for the Gitea install
+ ;DEFAULT_THEME = auto
+@@ -1342,7 +1342,7 @@ ROUTER = console
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[indexer]
++[indexer]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;
+@@ -1353,7 +1353,7 @@ ROUTER = console
+ ;ISSUE_INDEXER_TYPE = bleve
+ ;;
+ ;; Issue indexer storage path, available when ISSUE_INDEXER_TYPE is bleve
+-;ISSUE_INDEXER_PATH = indexers/issues.bleve ; Relative paths will be made absolute against _`AppWorkPath`_.
++ISSUE_INDEXER_PATH = ${LOCALSTATEDIR}/forgejo/indexers/issues.bleve
+ ;;
+ ;; Issue indexer connection string, available when ISSUE_INDEXER_TYPE is elasticsearch
+ ;ISSUE_INDEXER_CONN_STR = http://elastic:changeme@localhost:9200
+@@ -1371,7 +1371,7 @@ ROUTER = console
+ ;; When ISSUE_INDEXER_QUEUE_TYPE is levelqueue, this will be the path where the queue will be saved.
+ ;; This can be overridden by `ISSUE_INDEXER_QUEUE_CONN_STR`.
+ ;; default is queues/common
+-;ISSUE_INDEXER_QUEUE_DIR = queues/common; **DEPRECATED** use settings in `[queue.issue_indexer]`. Relative paths will be made absolute against `%(APP_DATA_PATH)s`.
++ISSUE_INDEXER_QUEUE_DIR = ${LOCALSTATEDIR}/forgejo/indexers/issues.queue
+ ;;
+ ;; When `ISSUE_INDEXER_QUEUE_TYPE` is `redis`, this will store the redis connection string.
+ ;; When `ISSUE_INDEXER_QUEUE_TYPE` is `levelqueue`, this is a directory or additional options of
+@@ -1392,7 +1392,7 @@ ROUTER = console
+ ;REPO_INDEXER_TYPE = bleve
+ ;;
+ ;; Index file used for code search. available when `REPO_INDEXER_TYPE` is bleve
+-;REPO_INDEXER_PATH = indexers/repos.bleve
++REPO_INDEXER_PATH = ${LOCALSTATEDIR}/forgejo/indexers/repos.bleve
+ ;;
+ ;; Code indexer connection string, available when `REPO_INDEXER_TYPE` is elasticsearch. i.e. http://elastic:changeme@localhost:9200
+ ;REPO_INDEXER_CONN_STR =
+@@ -1472,19 +1472,19 @@ ROUTER = console
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[admin]
++[admin]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;
+ ;; Disallow regular (non-admin) users from creating organizations.
+-;DISABLE_REGULAR_ORG_CREATION = false
++DISABLE_REGULAR_ORG_CREATION = true
+ ;;
+ ;; Default configuration for email notifications for users (user configurable). Options: enabled, onmention, disabled
+ ;DEFAULT_EMAIL_NOTIFICATIONS = enabled
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[openid]
++[openid]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;
+@@ -1505,7 +1505,7 @@ ROUTER = console
+ ;; - <username>.livejournal.com
+ ;;
+ ;; Whether to allow signin in via OpenID
+-;ENABLE_OPENID_SIGNIN = true
++ENABLE_OPENID_SIGNIN = false
+ ;;
+ ;; Whether to allow registering via OpenID
+ ;; Do not include to rely on rhw DISABLE_REGISTRATION setting
+@@ -1590,7 +1590,7 @@ ROUTER = console
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[mailer]
++[mailer]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;
+@@ -1613,12 +1613,12 @@ ROUTER = console
+ ;; If your provider does not explicitly say which protocol it uses but does provide a port,
+ ;; you can set SMTP_PORT instead and this will be inferred.
+ ;; (Before 1.18, see the notice, this was controlled via MAILER_TYPE and IS_TLS_ENABLED.)
+-;PROTOCOL =
++PROTOCOL = smtp
+ ;;
+ ;; Mail server address, e.g. smtp.gmail.com.
+ ;; For smtp+unix, this should be a path to a unix socket instead.
+ ;; (Before 1.18, see the notice, this was combined with SMTP_PORT as HOST.)
+-;SMTP_ADDR =
++SMTP_ADDR = localhost:25
+ ;;
+ ;; Mail server port. Common ports are:
+ ;; 25: insecure SMTP
+@@ -1641,11 +1641,11 @@ ROUTER = console
+ ;;
+ ;; Use client certificate in connection.
+ ;USE_CLIENT_CERT = false
+-;CLIENT_CERT_FILE = custom/mailer/cert.pem
+-;CLIENT_KEY_FILE = custom/mailer/key.pem
++;CLIENT_CERT_FILE = ${LOCALSTATEDIR}/forgejo/custom/mailer/cert.pem
++;CLIENT_KEY_FILE = ${LOCALSTATEDIR}/forgejo/custom/mailer/key.pem
+ ;;
+ ;; Mail from address, RFC 5322. This can be just an email address, or the `"Name" <email@example.com>` format
+-;FROM =
++FROM = forgejo@%(DOMAIN)s
+ ;;
+ ;; Sometimes it is helpful to use a different address on the envelope. Set this to use ENVELOPE_FROM as the from on the envelope. Set to `<>` to send an empty address.
+ ;ENVELOPE_FROM =
+@@ -1657,10 +1657,10 @@ ROUTER = console
+ ;PASSWD =
+ ;;
+ ;; Send mails only in plain text, without HTML alternative
+-;SEND_AS_PLAIN_TEXT = false
++SEND_AS_PLAIN_TEXT = true
+ ;;
+ ;; Specify an alternative sendmail binary
+-;SENDMAIL_PATH = sendmail
++SENDMAIL_PATH = /usr/sbin/sendmail
+ ;;
+ ;; Specify any extra sendmail arguments
+ ;; WARNING: if your sendmail program interprets options you should set this to "--" or terminate these args with "--"
+@@ -1757,20 +1757,20 @@ ROUTER = console
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[session]
++[session]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;
+ ;; Either "memory", "file", "redis", "db", "mysql", "couchbase", "memcache" or "postgres"
+ ;; Default is "memory". "db" will reuse the configuration in [database]
+-;PROVIDER = memory
++PROVIDER = file
+ ;;
+ ;; Provider config options
+ ;; memory: doesn't have any config yet
+ ;; file: session file path, e.g. `data/sessions`
+ ;; redis: `redis://127.0.0.1:6379/0?pool_size=100&idle_timeout=180s`
+ ;; mysql: go-sql-driver/mysql dsn config string, e.g. `root:password@/session_table`
+-;PROVIDER_CONFIG = data/sessions ; Relative paths will be made absolute against _`AppWorkPath`_.
++PROVIDER_CONFIG = ${LOCALSTATEDIR}/forgejo/data/sessions
+ ;;
+ ;; Session cookie name
+ ;COOKIE_NAME = i_like_gitea
+@@ -1789,12 +1789,12 @@ ROUTER = console
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[picture]
++[picture]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;
+-;AVATAR_UPLOAD_PATH = data/avatars
+-;REPOSITORY_AVATAR_UPLOAD_PATH = data/repo-avatars
++AVATAR_UPLOAD_PATH = ${LOCALSTATEDIR}/forgejo/data/avatars
++;REPOSITORY_AVATAR_UPLOAD_PATH = ${LOCALSTATEDIR}/forgejo/data/repo-avatars
+ ;;
+ ;; How Gitea deals with missing repository avatars
+ ;; none = no avatar will be displayed; random = random avatar will be displayed; image = default image will be used
+@@ -1819,7 +1819,7 @@ ROUTER = console
+ ;GRAVATAR_SOURCE = gravatar
+ ;;
+ ;; This value will always be true in offline mode.
+-;DISABLE_GRAVATAR = false
++DISABLE_GRAVATAR = true
+ ;;
+ ;; Federated avatar lookup uses DNS to discover avatar associated
+ ;; with emails, see https://www.libravatar.org
+@@ -1828,7 +1828,7 @@ ROUTER = console
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[attachment]
++[attachment]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;
+@@ -1853,7 +1853,7 @@ ROUTER = console
+ ;SERVE_DIRECT = false
+ ;;
+ ;; Path for attachments. Defaults to `data/attachments` only available when STORAGE_TYPE is `local`
+-;PATH = data/attachments
++PATH = ${LOCALSTATEDIR}/forgejo/data/attachments
+ ;;
+ ;; Minio endpoint to connect only available when STORAGE_TYPE is `minio`
+ ;MINIO_ENDPOINT = localhost:9000
+@@ -1884,14 +1884,14 @@ ROUTER = console
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[time]
++[time]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;
+ ;; Specifies the format for fully outputted dates. Defaults to RFC1123
+ ;; Special supported values are ANSIC, UnixDate, RubyDate, RFC822, RFC822Z, RFC850, RFC1123, RFC1123Z, RFC3339, RFC3339Nano, Kitchen, Stamp, StampMilli, StampMicro and StampNano
+ ;; For more information about the format see http://golang.org/pkg/time/#pkg-constants
+-;FORMAT =
++FORMAT = RFC1123Z
+ ;;
+ ;; Location the UI time display i.e. Asia/Shanghai
+ ;; Empty means server's location setting
+@@ -2326,14 +2326,14 @@ ROUTER = console
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+-;[other]
++[other]
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;SHOW_FOOTER_BRANDING = false
+ ;; Show version information about Gitea and Go in the footer
+-;SHOW_FOOTER_VERSION = true
++SHOW_FOOTER_VERSION = false
+ ;; Show template execution time in the footer
+-;SHOW_FOOTER_TEMPLATE_LOAD_TIME = true
++SHOW_FOOTER_TEMPLATE_LOAD_TIME = false
+ ;; Generate sitemap. Defaults to `true`.
+ ;ENABLE_SITEMAP = true
+ ;; Enable/Disable RSS/Atom feed
+@@ -2474,7 +2474,7 @@ ROUTER = console
+ ;ENABLED = true
+ ;;
+ ;; Path for chunked uploads. Defaults to APP_DATA_PATH + `tmp/package-upload`
+-;CHUNKED_UPLOAD_PATH = tmp/package-upload
++CHUNKED_UPLOAD_PATH = ${LOCALSTATEDIR}/forgejo/data/tmp/package-upload
+ ;;
+ ;; Maximum count of package versions a single owner can have (`-1` means no limits)
+ ;LIMIT_TOTAL_OWNER_COUNT = -1
+@@ -2539,7 +2539,7 @@ ROUTER = console
+ ;STORAGE_TYPE = local
+ ;;
+ ;; Where your lfs files reside, default is data/lfs.
+-;PATH = data/lfs
++PATH = ${LOCALSTATEDIR}/forgejo/data/lfs
+
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+ ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;