Course Outline
Source Code Sovereignty
- Why cloud Git platforms can expose proprietary code and trade secrets.
- Gitea architecture and comparison with GitHub, GitLab, and Forgejo.
- Licensing, terms of service, and data export considerations.
Installation and Configuration
- Docker Compose deployment with PostgreSQL and Redis.
- Binary installation on Linux with systemd service.
- Reverse proxy, TLS, and SSH port configuration.
- Initial setup wizard: database, admin account, and app.ini tuning.
Repository Management
- Creating organisations, teams, and repositories.
- Branch protection, required reviews, and signed commits.
- Issue tracking, labels, milestones, and Kanban boards.
- Wiki and release artefact hosting.
CI/CD with Gitea Actions
- Enabling Gitea Actions and registering act runners.
- Writing workflow YAML for build, test, and deploy.
- Self-hosted runner security and container isolation.
- Artefact caching and matrix builds.
Migration from Cloud Forges
- Repository mirroring and import from GitHub/GitLab.
- Migrating issues, pull requests, and release notes.
- Preserving commit signatures and GPG key trust.
Authentication and Access Control
- LDAP, Active Directory, and OpenID Connect integration.
- Two-factor authentication and deploy token management.
- Repository visibility: public, internal, and private scopes.
Security and Compliance
- Enforcing commit signing with GPG and SSH keys.
- Audit logging for repository access and admin changes.
- Dependency scanning and vulnerability webhook alerts.
Maintenance and Scaling
- Backup strategies for Git data, issues, and attachments.
- Database optimisation and attachment offloading to S3.
- Upgrading Gitea and handling breaking changes.
Requirements
- Intermediate understanding of Git and version control concepts.
- Linux server administration skills, including Docker.
- Familiarity with CI/CD pipelines and webhooks.
Target Audience
- Development teams replacing GitHub or GitLab.com.
- Organisations requiring on-premise source code custody.
- Government and defence contractors with code export restrictions.
Testimonials (4)
I like that I've got immediately answer to my questions.
Szabolcs Kriston - Ericsson
Course - Advanced GitLab
Repeat the important takeaway
Milly Chen - Logitech
Course - Gerrit Code Review
Exercises that we were able to do on VMs
Atif Bhatti
Course - Git Hands-on Workshop with Azure DevOps
I liked the easy communication between trainer and us, care given to our problems, insights and additional knowledge provided in anwers to our questions. I liked the pace, it didn't feel rushed at any point, even with technical problems. Each subject was taken care of properly.
