Gitea configuration

[jonnyry]

Things to consider:

1. SSO with Entra username
2. User account provisioning / SCIM with Entra groups- is this possible?
3. Isolation between research projects
4. Pull synchronisation
5. Push synchronisation
6. Backups
7. Backing store redundancy
8. Admin + User documentation
9. Upgrade Gitea to the latest version [DONE]

[jonnyry]

1. SSO with Entra username

1. Set up new App Registration in Entra:

• Name: Gitea
• Authentication:
  • Platform: web
  • Redirect URL: https://gitea-TREID.azurewebsites.net/user/oauth2//callback
  • Allow public client flows: yes
• Client secret (create new)
  • Name: gitea

Collect the Application ID, Client Secret, and to use in the next step. Also collect your Azure tenant ID.

2. Set up Gitea authentication:

Login as admin, go to Site Administration > Authentication Sources, then add a new source:

• Authentication Type: OAuth2
• Authentication Name: from above
• OAuth2 Provider: OpenID Connect
• Client ID:
• Client Secret:
• OpenID Connect Auth Discovery URL: https://login.microsoftonline.com/TENANT_ID/v2.0/.well-known/openid-configuration

3. Set up the following environment variables (in Web App > Environment Variables)

GITEA__service__DISABLE_REGISTRATION = false
GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION = true
GITEA__service__SHOW_REGISTRATION_BUTTON = false