Restore from Gitea ZIP snapshot (12.08.2026) after full instance reinstall

Git history was lost when the previous Gitea instance was wiped and
reinstalled due to an unresolved corruption bug — this commit is the
last known-good file content, exported before the reinstall. Prior
commit history is not recoverable through this path.

terraform/resize-vm-disk/main.tf

@@ -0,0 +1,56 @@
+data "vsphere_datacenter" "dc" {
+  name = var.vsphere_datacenter
+}
+
+data "vsphere_virtual_machine" "vm" {
+  name          = var.vm_name
+  datacenter_id = data.vsphere_datacenter.dc.id
+}
+
+locals {
+  current_disk_size_gb = data.vsphere_virtual_machine.vm.disks[0].size
+  target_disk_size_gb  = local.current_disk_size_gb + var.increase_gb
+}
+
+resource "vsphere_virtual_machine" "resize" {
+  name             = data.vsphere_virtual_machine.vm.name
+  resource_pool_id = data.vsphere_virtual_machine.vm.resource_pool_id
+  datastore_id     = data.vsphere_virtual_machine.vm.datastore_id
+
+  num_cpus  = data.vsphere_virtual_machine.vm.num_cpus
+  memory    = data.vsphere_virtual_machine.vm.memory
+  guest_id  = data.vsphere_virtual_machine.vm.guest_id
+  firmware  = data.vsphere_virtual_machine.vm.firmware
+  scsi_type = data.vsphere_virtual_machine.vm.scsi_type
+
+  network_interface {
+    network_id   = data.vsphere_virtual_machine.vm.network_interface_types[0] != "" ? data.vsphere_virtual_machine.vm.network_interface[0].network_id : null
+    adapter_type = data.vsphere_virtual_machine.vm.network_interface_types[0]
+  }
+
+  disk {
+    label            = var.disk_label
+    size             = local.target_disk_size_gb
+    unit_number      = 0
+    thin_provisioned = data.vsphere_virtual_machine.vm.disks[0].thin_provisioned
+  }
+
+  lifecycle {
+    ignore_changes = [
+      annotation,
+      clone,
+      extra_config,
+      hv_mode,
+      vapp,
+      network_interface,
+    ]
+  }
+}
+
+output "current_disk_size_gb" {
+  value = local.current_disk_size_gb
+}
+
+output "target_disk_size_gb" {
+  value = local.target_disk_size_gb
+}

terraform/resize-vm-disk/provider.tf

@@ -0,0 +1,6 @@
+provider "vsphere" {
+  user                 = var.vsphere_user
+  password             = var.vsphere_password
+  vsphere_server       = var.vsphere_server
+  allow_unverified_ssl = true
+}

terraform/resize-vm-disk/variables.tf

@@ -0,0 +1,30 @@
+variable "vsphere_user" {
+  type      = string
+  sensitive = true
+}
+
+variable "vsphere_password" {
+  type      = string
+  sensitive = true
+}
+
+variable "vsphere_server" {
+  type = string
+}
+
+variable "vsphere_datacenter" {
+  type = string
+}
+
+variable "vm_name" {
+  type = string
+}
+
+variable "increase_gb" {
+  type = number
+}
+
+variable "disk_label" {
+  type    = string
+  default = "disk0"
+}

terraform/resize-vm-disk/versions.tf

@@ -0,0 +1,8 @@
+terraform {
+  required_providers {
+    vsphere = {
+      source  = "vmware/vsphere"
+      version = "~> 2.15"
+    }
+  }
+}

terraform/vmware/.terraformrc

@@ -0,0 +1,9 @@
+provider_installation {
+  network_mirror {
+    url = "https://terraform-mirror.yandexcloud.net/"
+    include = ["registry.terraform.io/*/*"]
+  }
+  direct {
+    exclude = ["registry.terraform.io/*/*"]
+  }
+}

terraform/vmware/main.tf

@@ -0,0 +1,84 @@
+data "vsphere_datacenter" "dc" { 
+  name = var.vsphere_datacenter 
+}
+
+data "vsphere_datastore" "datastore" { 
+  name = var.vsphere_datastore
+  datacenter_id = data.vsphere_datacenter.dc.id 
+}
+
+data "vsphere_compute_cluster" "cluster" { 
+  name = var.vsphere_cluster
+  datacenter_id = data.vsphere_datacenter.dc.id 
+}
+
+data "vsphere_network" "network" { 
+  name = var.vsphere_network
+  datacenter_id = data.vsphere_datacenter.dc.id 
+}
+
+data "vsphere_virtual_machine" "template" { 
+  name = var.vm_template
+  datacenter_id = data.vsphere_datacenter.dc.id 
+}
+
+resource "vsphere_virtual_machine" "vm" {
+  name             = var.vm_name
+  resource_pool_id = data.vsphere_compute_cluster.cluster.resource_pool_id
+  datastore_id     = data.vsphere_datastore.datastore.id
+
+  num_cpus  = var.vm_cpu
+  memory    = var.vm_ram
+  guest_id  = data.vsphere_virtual_machine.template.guest_id
+  firmware  = data.vsphere_virtual_machine.template.firmware
+  scsi_type = data.vsphere_virtual_machine.template.scsi_type
+  efi_secure_boot_enabled = false
+  
+  cpu_hot_add_enabled    = true
+  memory_hot_add_enabled = true
+
+  network_interface {
+    network_id   = data.vsphere_network.network.id
+    adapter_type = data.vsphere_virtual_machine.template.network_interface_types[0]
+  }
+
+  disk {
+    label            = "disk0"
+    size             = var.vm_disk_size
+    thin_provisioned = data.vsphere_virtual_machine.template.disks[0].thin_provisioned
+  }
+
+  clone {
+    template_uuid = data.vsphere_virtual_machine.template.id
+
+    timeout = 40
+
+    customize {
+      windows_options {
+        computer_name  = var.vm_name
+        admin_password = var.admin_password 
+      }
+      network_interface {
+        ipv4_address = var.vm_ip
+        ipv4_netmask = var.vm_netmask
+      }
+      ipv4_gateway    = var.vm_gateway
+      dns_server_list = [var.primary_dns]
+    }
+  }
+
+  # --- Блок защиты от пересоздания ---
+  lifecycle {
+    # Запрещает Terraform удалять эту ВМ. Если кто-то запустит destroy или изменит критичный параметр,
+    # Terraform выдаст ошибку и остановится, спасая машину.
+    prevent_destroy = true 
+
+    # Игнорируем изменения в шаблоне и пароле после того, как машина уже создана.
+    # Если вы поменяете пароль админа внутри самой Windows, Terraform не будет ругаться 
+    # и пытаться накатить старый пароль.
+    ignore_changes = [
+      clone[0].template_uuid,
+      clone[0].customize[0].windows_options[0].admin_password
+    ]
+  }
+}

terraform/vmware/provider.tf

@@ -0,0 +1,6 @@
+provider "vsphere" {
+  user                 = var.vsphere_user
+  password             = var.vsphere_password
+  vsphere_server       = var.vsphere_server
+  allow_unverified_ssl = true
+}

terraform/vmware/variables.tf

@@ -0,0 +1,70 @@
+variable "vsphere_user" {
+  type      = string
+  sensitive = true
+}
+
+variable "vsphere_password" {
+  type      = string
+  sensitive = true
+}
+
+variable "vsphere_server" {
+  type = string
+}
+
+variable "admin_password" {
+  type      = string
+  sensitive = true
+}
+
+variable "vsphere_datacenter" {
+  type = string
+}
+
+variable "vsphere_network" {
+  type = string
+}
+
+variable "vm_template" {
+  type = string
+}
+
+variable "vm_name" {
+  type = string
+}
+
+variable "vsphere_cluster" {
+  type = string
+}
+
+variable "vsphere_datastore" {
+  type = string
+}
+
+variable "vm_cpu" {
+  type = number
+}
+
+variable "vm_ram" {
+  type = number
+}
+
+variable "vm_disk_size" {
+  type = number
+}
+
+variable "vm_ip" {
+  type = string
+}
+
+variable "vm_netmask" {
+  type = number
+}
+
+variable "vm_gateway" {
+  type = string
+}
+
+variable "primary_dns" {
+  type = string
+}

terraform/vmware/versions.tf

@@ -0,0 +1,8 @@
+terraform {
+  required_providers {
+    vsphere = {
+      source = "vmware/vsphere"
+      version = "~> 2.15"
+    }
+  }
+}