8000 feat(services): Gitea security & Passbolt icon update by UserCr4ig · Pull Request #5899 · coollabsio/coolify · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

feat(services): Gitea security & Passbolt icon update #5899

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 3 commits into
base: next
Choose a base branch
from

Conversation

UserCr4ig
Copy link

Pull Request: Gitea Security Enhancements & Passbolt Icon Update

This PR incorporates essential security improvements for the Gitea template and updates the Passbolt icon. It addresses feedback from a previous, unmerged pull request: #4524.


Changes

  • Updated the main Gitea template to enforce a secure configuration, making it private by default.
  • Updated the Passbolt icon for improved visual consistency.

Issues fixed

During a review of existing Gitea templates, I identified significant security vulnerabilities in their default configurations. To mitigate these risks, I've updated the primary Gitea template to include the following security best practices:

  • Enforced private visibility: The default setting is now private, preventing unintended public exposure.
  • Brute-force protection: Implemented measures to counter brute-force login attempts.
  • Enhanced session security: Improved handling of user sessions for better protection.
  • API restrictions: Applied limitations to the API to reduce potential attack vectors.
  • Reduced attack surface: Minimized exposed functionalities to lessen vulnerability.
  • Improved user access controls: Strengthened mechanisms for managing user permissions.

This comprehensive update aims to provide a more secure Gitea deployment experience by defaut for all users.

Copy link
Member
@peaklabs-dev peaklabs-dev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please test you changes as it is currently not working. Also make sure that all variables are configurable

environment:
- SERVICE_FQDN_GITEA_3000
- USER_UID=1000
- USER_GID=1000
# Domain configuration
- GITEA__server__ROOT_URL=${GITEA_SERVER_ROOT_URL}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should probably be set to the auto-generated URL.

environment:
- SERVICE_FQDN_GITEA_3000
- USER_UID=1000
- USER_GID=1000
# Domain configuration
- GITEA__server__ROOT_URL=${GITEA_SERVER_ROOT_URL}
- GITEA__server__DOMAIN=${GITEA_SERVER_DOMAIN}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should probably be set to the auto-generated Domain.

- GITEA__service__DEFAULT_USER_VISIBILITY=${GITEA_SERVICE_DEFAULT_USER_VISIBILITY:private}

# Additional Security
- GITEA__security__INSTALL_LOCK=true # Lock the installation to prevent unauthorized access
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Make these variables all configurable with defaults

@peaklabs-dev peaklabs-dev added ⚙️ Service Issues requesting or PRs adding/fixing service templates. 💤 Waiting for changes PRs awaiting changes from the author. labels Jun 18, 2025
@peaklabs-dev peaklabs-dev changed the title Fix/gitea security feat/passbolt feat(services): Gitea security & Passbolt icon update Jun 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
⚙️ Service Issues requesting or PRs adding/fixing service templates. 💤 Waiting for changes PRs awaiting changes from the author.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants
0