gitea: prod's Fly config lives here now, pinned to Gitea 28.0.0

green-tea's fly.toml was only on hb-5 (~/green-tea), on the floating
docker.gitea.com/gitea:1.24 tag. It moves here unchanged apart from the
image, which is now an exact release. Deploy from gitea/ after a volume
snapshot.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CYHXFvWMCs1GUmRmpySqQ6

gitea/fly.toml

@@ -0,0 +1,46 @@
+# Teahub prod's Gitea: Fly app green-tea, https://teahub.xyz. Deploy from this directory with `fly deploy -a green-tea`.
+# The image is an exact release. To upgrade: snapshot the gitea_data volume, change the tag here, deploy, read the
+# migration log. A migrated database can't go back to an older image; restoring the snapshot is the way back.
+app = "green-tea"
+primary_region = "iad"
+[build]
+  image = "docker.gitea.com/gitea:28.0.0"
+[env]
+  GITEA__server__ROOT_URL = "https://teahub.xyz/"
+  GITEA__server__DOMAIN = "teahub.xyz"
+  GITEA__server__HTTP_PORT = "3000"
+  GITEA__server__SSH_DOMAIN = "teahub.xyz"
+  GITEA__server__SSH_PORT = "2222"
+  GITEA__server__START_SSH_SERVER = "false"
+  SSH_LISTEN_PORT = "2222"
+  GITEA__server__SSH_LISTEN_PORT = "2222"
+  GITEA__database__DB_TYPE = "sqlite3"
+  GITEA__database__PATH = "/data/gitea/gitea.db"
+  GITEA__service__DISABLE_REGISTRATION = "false"
+  GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION = "true"
+  GITEA__security__INSTALL_LOCK = "true"
+  GITEA__oauth2_client__ENABLE_AUTO_REGISTRATION = "true"
+  GITEA__oauth2_client__USERNAME = "nickname"
+  GITEA__oauth2_client__ACCOUNT_LINKING = "auto"
+  GITEA__oauth2_client__REGISTER_EMAIL_CONFIRM = "false"
+  GITEA__oauth2_client__UPDATE_AVATAR = "true"
+  GITEA__mirror__ENABLED = "true"
+  GITEA__actions__ENABLED = "true"
+  GITEA__repository__DISABLE_HTTP_GIT = "false"
+[mounts]
+  source = "gitea_data"
+  destination = "/data"
+[http_service]
+  internal_port = 3000
+  force_https = true
+  auto_stop_machines = "off"
+  auto_start_machines = true
+  min_machines_running = 1
+[[services]]
+  protocol = "tcp"
+  internal_port = 2222
+  [[services.ports]]
+    port = 2222
+[[vm]]
+  size = "shared-cpu-1x"
+  memory = "512mb"