3. server: 4. environment: 5. - GITEA__security__SECRET_KEY=[value returned by generate secret SECRET_KEY] 6. - GITEA__security__INTERNAL_TOKEN=[value returned by generate secret INTERNAL_TOKEN] --active=false add-ldap ：添加新的 LDAP（通过 Bind DN）认证源 选项： --name value ：认证名称。必填。 --not-active ：停用认证源。 --security-protocol value ：安全协议名称。必填。 --skip-tls-verify ：禁用 TLS 验证。 --host value ：LDAP 服务器的地址。必填。 --port --synchronize-users ：启用用户同步。 --page-size value ：搜索页面大小。 示例： gitea admin auth add-ldap --name ldap --security-protocol unencrypted --host mydomain.org --port 389 --user-search-base "ou=Users,dc=mydomain,dc=org"

the daemon won’t serve a repository without that file in it — but, other than that, there is no security. Either the Git repository is available for everyone to clone, or it isn’t. This means that there setting up a production server within your infrastructure will certainly entail differences in security measures or operating system tools, but hopefully this will give you the general idea of what’s on the site, it will be linked to your user now. Two Factor Authentication Finally, for extra security, you should definitely set up Two-factor Authentication or “2FA”. Two-factor Authentication is

the daemon won’t serve a repository without that file in it — but, other than that, there is no security. Either the Git repository is available for everyone to clone, or it isn’t. This means that there setting up a production server within your infrastructure will certainly entail differences in security measures or operating system tools, but hopefully this will give you the general idea of what’s on the site, it will be linked to your user now. Two Factor Authentication Finally, for extra security, you should definitely set up Two-factor Authentication or “2FA”. Two- factor Authentication is

the daemon won’t serve a repository without that file in it — but, other than that, there is no security. Either the Git repository is available for everyone to clone, or it isn’t. This means that there setting up a production server within your infrastructure will certainly entail differences in security measures or operating system tools, but hopefully this will give you the general idea of what’s on the site, it will be linked to your user now. Two Factor Authentication Finally, for extra security, you should definitely set up Two-factor Authentication or “2FA”. Two-factor Authentication is

会要求你用两种不同的 验证方法，这样，即使其中一个被攻破，攻击者也不能访问你的账户。 你可以在 Account settings 页面的 Security 标签页中找到 Two-factor Authentication 设置。 168 图表 88. Security 标签页中的 2FA 点击“Set up two-factor authentication”按钮，会跳转到设置页面。该页面允许你选择是要在登录时使用手 ExecutionPolicy 的更多详情： https://docs.microsoft.com/en-us/powershell/module/ microsoft.powershell.security/set-executionpolicy > Set-ExecutionPolicy -Scope LocalMachine -ExecutionPolicy RemoteSigned -Force

会要求你用两种不同的验证方法，这 样，即使其中一个被攻破，攻击者也不能访问你的账户。 你 可 以 在 Account settings 页 面 的 Security 标 签 页 中 找 到 Two-factor Authentication 设置。 图表 88. Security 标签页中的 2FA 点击“Set up two-factor authentication”按钮，会跳转到设置页面。该页面 允许你选择是要在登录时使用手机 ExecutionPolicy 的 更 多 详 情 ： https://docs.microsoft.com/en- us/powershell/module/microsoft.powershell.security/set- executionpolicy > Set-ExecutionPolicy -Scope LocalMachine -ExecutionPolicy RemoteSigned -Force