gitea: enable HTTP/2 in nginx

roles/gitea/defaults/main.yaml

@@ -48,13 +48,11 @@ gitea_config:
     root_path: /var/log/gitea
     mode: file
     access: file
-    macaron: file
     router: file
-    redirect_macaron_log: true
   log.console:
     colorize: no
   service:
-    disable_registration: yes
+    register_manual_confirm: true
 
 gitea_var_tree:
   - "{{ gitea_var_path }}"

roles/gitea/tasks/configure.yaml

@@ -49,6 +49,12 @@
   notify:
     - restart gitea
 
+- name: set environment
+  lineinfile:
+    path: /etc/environment
+    regexp: ^GITEA_WORK_DIR
+    line: "GITEA_WORK_DIR=\"{{ gitea_var_path }}\""
+
 - name: configure systemd unit
   template:
     src: gitea.service.j2

roles/gitea/tasks/install.yaml

@@ -10,3 +10,4 @@
   notify:
     - restart gitea
   retries: 3
+  when: gitea_version != gitea_local_version

roles/gitea/tasks/pre.yaml

@@ -6,7 +6,7 @@
 
 - name: set gitea_installed
   set_fact:
-    gitea_installed: st.stat.exists
+    gitea_installed: "{{ st.stat.exists | bool }}"
 
 - block:
   - name: determine latest version
@@ -36,7 +36,7 @@
 - name: set gitea_local_version to 0
   set_fact:
     gitea_local_version: "0"
-  when: not gitea_installed | bool
+  when: not (gitea_installed | bool)
 
 - block:
   - name: get checksums

roles/gitea/templates/nginx.conf.j2

@@ -37,9 +37,9 @@ server {
 {% if gitea_ssl_enabled is defined and
       gitea_ssl_enabled %}
 server {
-    listen 443 ssl;
+    listen 443 ssl http2;
 {% if ansible_all_ipv6_addresses | length %}
-    listen [::]:443 ssl;
+    listen [::]:443 ssl http2;
 {% endif %}
     server_name {{ gitea_domain }};