当主权代码基础设施成为刚需：从荷兰政府到独立开发者的 Forgejo 迁移潮

# docker-compose.yml — Forgejo 最小自托管部署
version: "3.8"

services:
  forgejo:
    image: codeberg.org/forgejo/forgejo:9.0
    container_name: forgejo
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - FORGEJO__database__DB_TYPE=postgres
      - FORGEJO__database__HOST=db:5432
      - FORGEJO__database__NAME=forgejo
      - FORGEJO__database__USER=forgejo
      - FORGEJO__database__PASSWD=forgejo_secret
      # 禁止新用户注册（私有实例）
      - FORGEJO__service__DISABLE_REGISTRATION=true
      # 关闭公开探索页面
      - FORGEJO__service__ENABLE_USER_HEADING=false
    volumes:
      - forgejo-data:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "3000:3000"   # Web UI
      - "2222:22"     # SSH git access
    depends_on:
      - db
    restart: unless-stopped

  db:
    image: postgres:16
    container_name: forgejo-db
    environment:
      - POSTGRES_USER=forgejo
      - POSTGRES_PASSWORD=forgejo_secret
      - POSTGRES_DB=forgejo
    volumes:
      - postgres-data:/var/lib/postgresql/data
    restart: unless-stopped

volumes:
  forgejo-data:
  postgres-data:

# 启动服务
docker compose up -d

# 等待约 30 秒后检查健康状态
curl -s http://localhost:3000/api/v1/version | python3 -m json.tool

# 创建管理员账户（首次部署必须）
docker exec -u git forgejo forgejo admin user create \
  --admin --username yourname \
  --password yourpassword \
  --email you@example.com

# 通过 API 执行迁移（需要管理员 token）
curl -X POST "http://localhost:3000/api/v1/repos/migrate" \
  -H "Authorization: token YOUR_ADMIN_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "clone_addr": "https://github.com/yourname/your-repo.git",
    "auth_token": "ghp_YOUR_GITHUB_TOKEN",
    "repo_name": "your-repo",
    "mirror": false,
    "service": "github",
    "issues": true,
    "pull_requests": true,
    "labels": true,
    "releases": true
  }'

# 批量迁移：列出 GitHub 上所有自己的公开仓库并逐个迁移
GITHUB_USER="yourname"
GH_TOKEN="ghp_YOUR_GITHUB_TOKEN"
FORGEJO_TOKEN="YOUR_ADMIN_TOKEN"
FORGEJO_HOST="http://localhost:3000"

repos=$(curl -s -H "Authorization: token $GH_TOKEN" \
  "https://api.github.com/users/$GITHUB_USER/repos?per_page=100" \
  | python3 -c "import sys,json; [print(r['full_name']) for r in json.load(sys.stdin)]")

for repo in $repos; do
  echo "Migrating $repo ..."
  curl -s -X POST "$FORGEJO_HOST/api/v1/repos/migrate" \
    -H "Authorization: token $FORGEJO_TOKEN" \
    -H "Content-Type: application/json" \
    -d "{
      \"clone_addr\": \"https://github.com/${repo}.git\",
      \"auth_token\": \"$GH_TOKEN\",
      \"repo_name\": \"$(basename $repo)\",
      \"mirror\": false,
      \"service\": \"github\",
      \"issues\": true,
      \"pull_requests\": true
    }"
  echo ""
done

# .forgejo/workflows/test.yml — 与 GitHub Actions 语法几乎一致
on: [push]
jobs:
  test:
    runs-on: docker  # Forgejo 自托管 Runner
    steps:
      - uses: actions/checkout@v4
      - run: pip install -r requirements.txt
      - run: pytest