From b963f36b307999e14b574e9aef8ed9e6da408b4e Mon Sep 17 00:00:00 2001
From: Conan Scott <conanscott@gmail.com>
Date: Fri, 19 Dec 2025 19:34:02 +1100
Subject: [PATCH] removed workflow

---
 .gitea/workflows/publish-helm.yaml | 57 ------------------------------
 templates/statefulset.yaml         |  3 ++
 values.yaml                        |  6 ++--
 3 files changed, 7 insertions(+), 59 deletions(-)
 delete mode 100644 .gitea/workflows/publish-helm.yaml

diff --git a/.gitea/workflows/publish-helm.yaml b/.gitea/workflows/publish-helm.yaml
deleted file mode 100644
index a019165..0000000
--- a/.gitea/workflows/publish-helm.yaml
+++ /dev/null
@@ -1,57 +0,0 @@
-name: Helm Publish
-
-on:
-  push:
-    branches:
-      - main
-  workflow_dispatch:
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Install Helm
-        run: |
-          set -euo pipefail
-          curl -sSL https://get.helm.sh/helm-v3.15.0-linux-amd64.tar.gz -o /tmp/helm.tgz
-          tar xzf /tmp/helm.tgz -C /tmp
-          install /tmp/linux-amd64/helm /usr/local/bin/helm
-
-      - name: Install helm cm-push plugin
-        run: |
-          set -euo pipefail
-          helm plugin install https://github.com/chartmuseum/helm-push
-
-      - name: Lint and package chart
-        run: |
-          set -euo pipefail
-          ##helm lint .
-          helm dependency update . || true
-          helm package . -d /tmp
-
-      - name: Push chart to Gitea Helm registry
-        env:
-          HELM_REPO_URL: "https://gitea.apilab.us/api/packages/cscott/helm"
-          HELM_REPO_NAME: "gitea-helm"
-          HELM_USER: "cscott"
-          HELM_PASSWORD: "${{ secrets.HELM_PASSWORD }}"
-        run: |
-          set -euo pipefail
-          helm repo add "$HELM_REPO_NAME" "$HELM_REPO_URL" \
-            --username "$HELM_USER" \
-            --password "$HELM_PASSWORD"
-
-          NAME="$(grep '^name:' Chart.yaml | awk '{print $2}')"
-          YAML_VERSION="$(grep '^version:' Chart.yaml | awk '{print $2}')"
-          CHART_TGZ="/tmp/${NAME}-${YAML_VERSION}.tgz"
-          if [ ! -f "$CHART_TGZ" ]; then
-            echo "Expected packaged chart not found: $CHART_TGZ"
-            ls -l /tmp
-            exit 1
-          fi
-
-          helm cm-push "$CHART_TGZ" "$HELM_REPO_NAME"
diff --git a/templates/statefulset.yaml b/templates/statefulset.yaml
index c66d1cf..c3a8c2d 100644
--- a/templates/statefulset.yaml
+++ b/templates/statefulset.yaml
@@ -91,6 +91,9 @@ spec:
         - name: dind
           image: "{{ include "gitea.actions.dind.image" . }}"
           imagePullPolicy: {{ .Values.statefulset.dind.pullPolicy }}
+          args:
+            - "--iptables=false"
+            - "--ip-forward=false"
           env:
             - name: DOCKER_HOST
               value: tcp://127.0.0.1:2376
diff --git a/values.yaml b/values.yaml
index b87443c..7a29e20 100644
--- a/values.yaml
+++ b/values.yaml
@@ -46,7 +46,7 @@ statefulset:
   tolerations: []
   affinity: {}
   extraVolumes: []
-  #securityContext: {}
+  securityContext: {}
 
   actRunner:
     registry: "docker.gitea.com"
@@ -83,9 +83,11 @@ statefulset:
 
     # If the container keeps crashing in your environment, you might have to add the `DOCKER_IPTABLES_LEGACY` environment variable.
     # See https://github.com/docker-library/docker/issues/463#issuecomment-1881909456
-    extraEnvs: []
+    extraEnvs:
       #  - name: "DOCKER_IPTABLES_LEGACY"
       #    value: "1"
+      - name: DOCKER_OPTS
+        value: "--iptables=false --ip-forward=false"
 
   persistence:
     size: 1Gi