gitea: relax required signin, set admin group+skip 2fa

services/gitea/deployment.yaml

@@ -63,6 +63,8 @@ spec:
               value: "false"
             - name: GITEA__log__LEVEL
               value: "debug"
+            - name: GITEA__service__REQUIRE_SIGNIN_VIEW
+              value: "false"
             - name: DB_TYPE
               value: "postgres"
             - name: DB_HOST

services/gitea/oidc-job.yaml

@@ -71,7 +71,9 @@ spec:
                   --secret "$CLIENT_SECRET" \
                   --auto-discover-url "$DISCOVERY_URL" \
                   --scopes "openid profile email" \
-                  --group-claim-name groups
+                  --group-claim-name groups \
+                  --admin-group admin \
+                  --skip-local-2fa
               else
                 echo "Creating keycloak auth source"
                 $BIN -c "$APPINI" admin auth add-oauth \
@@ -81,5 +83,7 @@ spec:
                   --secret "$CLIENT_SECRET" \
                   --auto-discover-url "$DISCOVERY_URL" \
                   --scopes "openid profile email" \
-                  --group-claim-name groups
+                  --group-claim-name groups \
+                  --admin-group admin \
+                  --skip-local-2fa
               fi