Vanguard media stack: ingest, copyparty, Syncthing, normalize sweep, Authentik, Jellyfin + Vanguard Metadata plugin, MariaDB, Gitea, bot runtime

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

mariadb/init/10-gitea.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+# Runs once, on MariaDB's first initialisation (docker-entrypoint-initdb.d). Creates Gitea's database and user.
+# Already-initialised server? run ./createGiteaDb.sh from the bundle root instead.
+set -e
+: "${GITEA_DB_PASSWORD:?GITEA_DB_PASSWORD not set}"
+mariadb -uroot -p"$MARIADB_ROOT_PASSWORD" <<SQL
+CREATE DATABASE IF NOT EXISTS gitea CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
+CREATE USER IF NOT EXISTS 'gitea'@'%' IDENTIFIED BY '${GITEA_DB_PASSWORD}';
+GRANT ALL PRIVILEGES ON gitea.* TO 'gitea'@'%';
+FLUSH PRIVILEGES;
+SQL
+echo "gitea database + user created"