From 648e47e1eaa55c234963cf04f858887446712f50 Mon Sep 17 00:00:00 2001
From: thhsh-local <thhsh-local@noreply.git.starcat.systems>
Date: Thu, 3 Jul 2025 14:40:41 -0400
Subject: [PATCH] Update app.ini

Reorganize (cosmetic)
Update redacted values
Add Explore restrictions
---
 forgejo/app_ini/app.ini | 78 ++++++++++++++++++++++++-----------------
 1 file changed, 45 insertions(+), 33 deletions(-)

diff --git a/forgejo/app_ini/app.ini b/forgejo/app_ini/app.ini
index 6af747d..f4af7ce 100644
--- a/forgejo/app_ini/app.ini
+++ b/forgejo/app_ini/app.ini
@@ -1,9 +1,27 @@
+;; Forgejo app.ini
+;; Configures the Forgejo server for git.starcat.systems
+;; File location: /etc/forgejo/app.ini
+;; More information - git repo: https://git.starcat.systems/starcat-infra/git-server/src/branch/main/forgejo/app_ini
+;; More information - handbook: https://about.starcat.systems/handbook/infrastructure/code/forgejo/
+
 APP_NAME = StarCat Git
 APP_SLOGAN = Git repo hosting for StarCat Systems
 RUN_USER = git
 WORK_PATH = /var/lib/forgejo
 RUN_MODE = prod
 
+[server]
+SSH_DOMAIN = git.starcat.systems
+DOMAIN = git.starcat.systems
+HTTP_PORT = 3000
+ROOT_URL = https://git.starcat.systems/
+APP_DATA_PATH = /var/lib/forgejo/data
+DISABLE_SSH = false
+SSH_PORT = 22
+LFS_START_SERVER = true
+LFS_JWT_SECRET = *REDACTED*
+OFFLINE_MODE = true
+
 [database]
 DB_TYPE = sqlite3
 HOST = 127.0.0.1:3306
@@ -18,28 +36,34 @@ LOG_SQL = false
 [repository]
 ROOT = /var/lib/forgejo/data/forgejo-repositories
 
-[server]
-SSH_DOMAIN = git.starcat.systems
-DOMAIN = git.starcat.systems
-HTTP_PORT = 3000
-ROOT_URL = https://git.starcat.systems/
-APP_DATA_PATH = /var/lib/forgejo/data
-DISABLE_SSH = false
-SSH_PORT = 22
-LFS_START_SERVER = true
-LFS_JWT_SECRET = <REDACTED - GITEA__SERVER__LFS_JWT_SECRET>
-OFFLINE_MODE = true
+[repository.pull-request]
+DEFAULT_MERGE_STYLE = merge
+
+[repository.signing]
+DEFAULT_TRUST_MODEL = committer
 
 [lfs]
 PATH = /var/lib/forgejo/data/lfs
 
 [mailer]
 ENABLED = true
-SMTP_ADDR = <REDACTED - GITEA__MAILER__SMTP_ADDR>
+SMTP_ADDR = *REDACTED*
 SMTP_PORT = 465
 FROM = "git.starcat.systems" <git@git.starcat.systems>
 USER = git@git.starcat.systems
-PASSWD = <REDACTED - GITEA__MAILER__PASSWD>
+PASSWD = *REDACTED*
+
+[email.incoming]
+ENABLED = true
+REPLY_TO_ADDRESS = incoming+%{token}@git.starcat.systems
+HOST = *REDACTED*
+PORT = 993
+USERNAME = incoming@git.starcat.systems
+PASSWORD = *REDACTED*
+USE_TLS = false
+MAILBOX = Inbox
+DELETE_HANDLED_MESSAGE = true
+MAXIMUM_MESSAGE_SIZE = 10485760
 
 [service]
 REGISTER_EMAIL_CONFIRM = false
@@ -53,6 +77,12 @@ DEFAULT_ALLOW_CREATE_ORGANIZATION = true
 DEFAULT_ENABLE_TIMETRACKING = true
 NO_REPLY_ADDRESS = noreply.git.starcat.systems
 
+[service.explore]
+REQUIRE_SIGNIN_VIEW = true
+DISABLE_USERS_PAGE = true
+DISABLE_ORGANIZATIONS_PAGE = true
+DISABLE_CODE_PAGE = false
+
 [openid]
 ENABLE_OPENID_SIGNIN = false
 ENABLE_OPENID_SIGNUP = false
@@ -68,31 +98,13 @@ MODE = console
 LEVEL = info
 ROOT_PATH = /var/lib/forgejo/log
 
-[repository.pull-request]
-DEFAULT_MERGE_STYLE = merge
-
-[repository.signing]
-DEFAULT_TRUST_MODEL = committer
-
 [security]
 INSTALL_LOCK = true
-INTERNAL_TOKEN = <REDACTED - GITEA__SECURITY__INTERNAL_TOKEN>
+INTERNAL_TOKEN = *REDACTED*
 PASSWORD_HASH_ALGO = pbkdf2_hi
 
 [oauth2]
-JWT_SECRET = <REDACTED - GITEA__OAUTH2__JWT_SECRET>
-
-[email.incoming]
-ENABLED = true
-REPLY_TO_ADDRESS = incoming+%{token}@git.starcat.systems
-HOST = <REDACTED - GITEA__EMAIL_0x2E_INCOMING__HOST>
-PORT = 993
-USERNAME = incoming@git.starcat.systems
-PASSWORD = <REDACTED - GITEA__EMAIL_0x2E_INCOMING__PASSWORD>
-USE_TLS = false
-MAILBOX = Inbox
-DELETE_HANDLED_MESSAGE = true
-MAXIMUM_MESSAGE_SIZE = 10485760
+JWT_SECRET = *REDACTED*
 
 [ui]
 THEMES = forgejo-auto,forgejo-light,forgejo-dark,gitea-auto,gitea-light,gitea-dark