Gitea: keep off the node that hosts ingress-nginx

Sharing the 1-CPU ingress node with Nextcloud starved it into a
restart loop.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tasks/gitea.yaml

@@ -17,6 +17,19 @@
     release_namespace: gitea
     create_namespace: true
     values:
+      # Keep heavy apps off the 1-CPU node that hosts ingress-nginx; sharing it
+      # starved Nextcloud and risks the ingress / MetalLB announcement.
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - topologyKey: kubernetes.io/hostname
+              namespaceSelector:
+                matchLabels:
+                  kubernetes.io/metadata.name: ingress-nginx
+              labelSelector:
+                matchLabels:
+                  app.kubernetes.io/component: controller
+                  app.kubernetes.io/name: ingress-nginx
       image:
         pullPolicy: Always
       service: