declare the Samba AD group mapped by Gitea oauth2.adminGroup
add panxiao81 as the initial human site administrator
retain the local gitea_admin account as break-glass access
Validation
ansible-playbook provision-dc.yml --syntax-check
yamllint group_vars/all/vars.yml
git diff --check
confirmed no Terraform state or plan files in the diff
Deployment
Not applied to Samba AD. After merge, run the directory/accounts-tagged play and verify group membership before refreshing the Gitea OIDC session.
## Summary
- declare the Samba AD group mapped by Gitea oauth2.adminGroup
- add panxiao81 as the initial human site administrator
- retain the local gitea_admin account as break-glass access
## Validation
- ansible-playbook provision-dc.yml --syntax-check
- yamllint group_vars/all/vars.yml
- git diff --check
- confirmed no Terraform state or plan files in the diff
## Deployment
Not applied to Samba AD. After merge, run the directory/accounts-tagged play and verify group membership before refreshing the Gitea OIDC session.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
Validation
Deployment
Not applied to Samba AD. After merge, run the directory/accounts-tagged play and verify group membership before refreshing the Gitea OIDC session.