gitea: add proxy/session headers for OIDC

services/gitea/deployment.yaml

@@ -131,6 +131,14 @@ spec:
               value: "trace"
             - name: GITEA__service__REQUIRE_SIGNIN_VIEW
               value: "false"
+            - name: GITEA__server__PROXY_HEADERS
+              value: "X-Forwarded-For, X-Forwarded-Proto, X-Forwarded-Host"
+            - name: GITEA__session__COOKIE_SECURE
+              value: "true"
+            - name: GITEA__session__DOMAIN
+              value: "scm.bstein.dev"
+            - name: GITEA__session__SAME_SITE
+              value: "lax"
             - name: GITEA__security__SECRET_KEY
               valueFrom:
                 secretKeyRef: