Add some kludges to gitea-ansible notes

source/resources/apps/gitea-ansible/README.md

@@ -189,3 +189,26 @@ FLUSH PRIVILEGES;
 Disable IPv6 in nginx. Comment out this line in /etc/nginx/sites-enabled/default.conf :
 listen [::]:80 default_server;
 
+# XXX Letsencrypt kludge for SMTP SSL:
+# Copy over Letencrypt keys for Gitea to use, chown to gitea
+# XXX will not autorenew
+
+cp -p /etc/letsencrypt/live/code.forksand.com/cert.pem /var/lib/gitea/custom/mailer/cert.pem
+
+cp -p /etc/letsencrypt/live/code.forksand.com/privkey.pem /var/lib/gitea/custom/mailer/key.pem
+
+chmod og-rwx /var/lib/gitea/custom/mailer/cert.pem /var/lib/gitea/custom/mailer/key.pem
+
+chown gitea:root /var/lib/gitea/custom/mailer/cert.pem /var/lib/gitea/custom/mailer/key.pem
+
+# Set up tmp dirs
+mkdir -p /var/lib/gitea/data/tmp/uploads /var/lib/gitea/data/attachments
+chown -R gitea:gitea /var/lib/gitea/data/tmp /var/lib/gitea/data/attachments
+
+
+# Mirror Github / OCA repos:
+sudo chown jebba /var/lib/gitea/oca
+cd /var/lib/gitea/oca
+git clone --mirror https://github.com/OCA/maintainer-tools.git
+
+sudo chown -R gitea:gitea /var/lib/gitea/oca/