---
type: entity
path: Wiki/Reference
tags:
  - gitea
  - git
  - docker
created: 2026-05-08
updated: 2026-05-24
---

# Gitea

## What it is

Gitea is the self-hosted Git service running in the PBS Docker stack. It provides a private Git hosting layer for PBS projects, automation pipelines, and vault writes. Gitea hosts service accounts (like `pbsdeploybot`) used for CI/CD and automated git operations, keeping machine credentials separate from personal accounts.

## Current state

Active. Key roles:
- **pbsdeploybot machine user** — Gitea account used by GitHub Actions for PBS deployments; SSH host alias pattern avoids ambiguous key usage
- **Email-to-vault pipeline** — Gmail → n8n → Gitea push → vault (Gitea as the git push endpoint for new session notes)
- **Repository hosting** — hosts PBS-related private repos alongside GitHub mirrors

The GitHub deploy refactor project completed the migration to pbsdeploybot with Gitea SSH host aliases, replacing the previous ambiguous key setup.

A **relocation is planned** ([[Sources/Homelab/gitea-migration-to-pve|gitea-migration-to-pve]]): promote a new PVE LXC Gitea to canonical for homelab/`petal-power` repos, keep the PBS instance canonical for PBS business code, and cross-mirror each as the other's insurance copy. The reframe is that PBS-Gitea was already serving as paid offsite backup. Lovebug also pushes vault-mcp commits to Gitea over HTTPS using a `lovebug` PAT via an env-driven git credential helper (the semicolon-trap and token fixes are documented in the consolidation session notes).

## Where it lives

- PBS Linode Docker stack (`gitea` service)
- Behind Traefik ingress
- Persistent data in Docker volumes

## Related projects

- [[Sources/Dev/github-deploy-refactor|github-deploy-refactor]] — pbsdeploybot + SSH host alias pattern
- [[Sources/Dev/email-to-obsidian-automation|email-to-obsidian-automation]] — Gitea as vault write endpoint
- [[Sources/Dev/email-obsidian-git-pipeline|email-obsidian-git-pipeline]] — email pipeline session notes
- [[Sources/Homelab/env-file-hardening|env-file-hardening]] — pbsdeploy credential separation
- [[Sources/Homelab/gitea-migration-to-pve|gitea-migration-to-pve]] — planned PVE LXC relocation + cross-mirror
- [[Wiki/Reference/traefik|traefik]] — ingress layer
- [[Wiki/Reference/n8n|n8n]] — automation that pushes to Gitea

## History

- Ongoing — Self-hosted git service in PBS stack
- **2026** — pbsdeploybot machine user created; SSH host alias pattern implemented
- **2026** — Email-to-vault pipeline wired through Gitea as the push endpoint
- **2026-05** — vault-mcp push surface wired (lovebug PAT + HTTPS credential helper)
- **2026-05-23** — PVE LXC migration plan written: two-instance cross-mirror, `petal-power` canonical on the new instance