Store Gitea data (avatars, attachments, etc.) in Garage/S3

Also adds a new garage gateway role, which only allows RPC (inter-node)
traffic to Garage.

nodes/gitea-2.json

@@ -1,5 +1,6 @@
 {
   "name": "gitea-2",
+  "chef_environment": "production",
   "normal": {
     "knife_zero": {
       "host": "10.1.1.21"
@@ -13,6 +14,7 @@
     "ipaddress": "192.168.122.189",
     "roles": [
       "kvm_guest",
+      "garage_gateway",
       "gitea",
       "postgresql_client"
     ],
@@ -20,6 +22,8 @@
       "kosmos-base",
       "kosmos-base::default",
       "kosmos_kvm::guest",
+      "kosmos_garage",
+      "kosmos_garage::default",
       "kosmos_postgresql::hostsfile",
       "kosmos_gitea",
       "kosmos_gitea::default",
@@ -58,8 +62,9 @@
     }
   },
   "run_list": [
-    "recipe[kosmos-base]",
+    "role[base]",
     "role[kvm_guest]",
+    "role[garage_gateway]",
     "role[gitea]"
   ]
-}
+}