Initial kosmos_gitea cookbook

The default recipe deploys the gitea binary, generates a config file and
our custom Kosmos label set. The service runs as a Systemd unit.

The pg_db recipe needs to run on the primary PostgreSQL (currently
andromeda).

The backup recipe is empty for now

Refs #147

data_bags/credentials/gitea.json

@@ -0,0 +1,31 @@
+{
+  "id": "gitea",
+  "jwt_secret": {
+    "encrypted_data": "qHUcKXEhYWXZziyiI9URzLiyIRVWlVJmAuOyBhTe/xogUzURgCmbcgeEfOkb\n2GT2E2Qot5MDdV2+PgjwkyY=\n",
+    "iv": "LCl4UrlOrhcaHgaW\n",
+    "auth_tag": "UxyCH/obwVyR6fpIdmr/KA==\n",
+    "version": 3,
+    "cipher": "aes-256-gcm"
+  },
+  "internal_token": {
+    "encrypted_data": "lIeZaN6Dx6Jq+/1m0CzBzDa+/gGE+lA0CfzdMn5c0cKVmISIRfdxDE1PfawL\nFm7zvktC1DdlHnCLPKK03U6Lzy2VWRIn6HCZC8IbeFzf7zmWvHrpjOw5pEqA\nGdQmLZ2IDHcs7VcM7Xml0olH9cvccFCAGahdp5wrwB+14w==\n",
+    "iv": "ZPl9OJkrJAgneqvW\n",
+    "auth_tag": "QwqSj0q+olo811kiN+FbgQ==\n",
+    "version": 3,
+    "cipher": "aes-256-gcm"
+  },
+  "secret_key": {
+    "encrypted_data": "z4nxVYGEo/hqSHZ4qa5s+a9wMHUOnms5cOsSd07Nuth8YntyS3KOKfhhjvRe\n5oSDShD6IPIWGjDI481HbiJkLFufyQGHV8oR5HDvel/dKNCrokw=\n",
+    "iv": "xF8mlqQQVC5Senbt\n",
+    "auth_tag": "Un/oE3NxQMtpJQUutH19uw==\n",
+    "version": 3,
+    "cipher": "aes-256-gcm"
+  },
+  "postgresql_password": {
+    "encrypted_data": "qflAQFt3eMkODtNP86zjH77Y3fRvc3BWXeV0Zra4Zezkaa6vsZOWePaqSg==\n",
+    "iv": "SrpWet9nSiEeRMma\n",
+    "auth_tag": "SAvgZ5pmwWDsx3uud1EeTg==\n",
+    "version": 3,
+    "cipher": "aes-256-gcm"
+  }
+}