Forgejo

Forgejo is the self-hosted Git forge for the platform — a lightweight alternative to GitHub for private repositories, CI runners, and package registries.

Deployment

Field	Value
Flux path	flux-clusters/stefanzhelev/apps/forgejo
Base path	flux-apps/forgejo
Namespace	forgejo
Sync wave	4
Depends on	cloudnative-pg, external-secrets-config

What it deploys

• HelmRelease for the Forgejo chart >= 16.0.0
• ExternalSecrets for admin credentials and database connection details
• Terraform CR (via Tofu Controller) that provisions those secrets in Vault

Configuration highlights

Setting	Value
Domain	forgejo.stefanzhelev.com
Root URL	https://forgejo.stefanzhelev.com
Database	external PostgreSQL via CloudNative-PG
DB host	postgresql-rw.cnpg.svc.cluster.local:5432
DB SSL	required
Cache	built-in Redis
Storage	10Gi persistent volume
Resources	100m CPU / 256Mi memory request, 512Mi memory limit

Integrations

• Vault + Tofu Controller: admin user and DB password live in Vault and are synced into the namespace
• CloudNative-PG: Forgejo’s metadata database
• Authentik: OIDC sign-in (planned)

Key commands

kubectl get pods -n forgejo
kubectl logs -n forgejo -l app.kubernetes.io/name=forgejo
kubectl port-forward -n forgejo svc/forgejo-http 3000:3000

# Forgejo CLI inside the pod
kubectl exec -n forgejo -it deploy/forgejo -- forgejo admin user list