Added comprehensive support for custom Certificate Authority (CA) certificates, enabling Gitea Mirror to work seamlessly with self-signed certificates or private CAs.
Two Flexible Options:
Individual CA Certificates: Place .crt files in the certs directory
System CA Bundle: Mount your existing system CA bundle directly
Key Improvements:
✅ Automatic detection and configuration of custom CA certificates
✅ Support for multiple CA certificates (automatically combined into a bundle)
✅ Compatible with both individual certificates and system CA bundles
✅ Enhanced documentation with clear setup instructions
✅ Added ca-certificates package to Docker image for better SSL/TLS support
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [ghcr.io/raylabshq/gitea-mirror](https://github.com/RayLabsHQ/gitea-mirror) | minor | `v2.20.1` -> `v2.21.0` |
---
### Release Notes
<details>
<summary>RayLabsHQ/gitea-mirror (ghcr.io/raylabshq/gitea-mirror)</summary>
### [`v2.21.0`](https://github.com/RayLabsHQ/gitea-mirror/releases/tag/v2.21.0)
[Compare Source](https://github.com/RayLabsHQ/gitea-mirror/compare/v2.20.1...v2.21.0)
#### 🚀 New Features
##### Custom CA Certificate Support
Added comprehensive support for custom Certificate Authority (CA) certificates, enabling Gitea Mirror to work seamlessly with self-signed certificates or private CAs.
##### Two Flexible Options:
1. **Individual CA Certificates**: Place `.crt` files in the `certs` directory
2. **System CA Bundle**: Mount your existing system CA bundle directly
##### Key Improvements:
- ✅ Automatic detection and configuration of custom CA certificates
- ✅ Support for multiple CA certificates (automatically combined into a bundle)
- ✅ Compatible with both individual certificates and system CA bundles
- ✅ Enhanced documentation with clear setup instructions
- ✅ Added `ca-certificates` package to Docker image for better SSL/TLS support
#### 📝 Configuration
##### Option 1: Individual Certificates
```yaml
volumes:
- ./certs:/app/certs:ro
```
##### Option 2: System CA Bundle
```yaml
volumes:
- /etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt:ro
```
#### 📚 Documentation
- Created dedicated CA certificates guide in `certs/README.md`
- Updated docker-compose examples with both mounting options
- Added system CA bundle locations for various operating systems
#### 🔧 Technical Details
- Updated `docker-entrypoint.sh` to handle CA certificate detection and configuration
- Enhanced Docker image with `ca-certificates` package
- Added `.gitignore` rules to prevent accidental certificate commits
- Created symbolic link from docs to maintain documentation structure
#### 🔒 Security
- Certificates are mounted read-only for security
- Clear warnings about `NODE_TLS_REJECT_UNAUTHORIZED` for testing only
- Proper file permissions maintained for non-root container user
***
For detailed setup instructions, see the [CA Certificates Guide](./certs/README.md).
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4yMy41IiwidXBkYXRlZEluVmVyIjoiNDEuMjMuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicmVub3ZhdGUiXX0=-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v2.20.1->v2.21.0Release Notes
RayLabsHQ/gitea-mirror (ghcr.io/raylabshq/gitea-mirror)
v2.21.0Compare Source
🚀 New Features
Custom CA Certificate Support
Added comprehensive support for custom Certificate Authority (CA) certificates, enabling Gitea Mirror to work seamlessly with self-signed certificates or private CAs.
Two Flexible Options:
.crtfiles in thecertsdirectoryKey Improvements:
ca-certificatespackage to Docker image for better SSL/TLS support📝 Configuration
Option 1: Individual Certificates
Option 2: System CA Bundle
📚 Documentation
certs/README.md🔧 Technical Details
docker-entrypoint.shto handle CA certificate detection and configurationca-certificatespackage.gitignorerules to prevent accidental certificate commits🔒 Security
NODE_TLS_REJECT_UNAUTHORIZEDfor testing onlyFor detailed setup instructions, see the CA Certificates Guide.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.