version: "3"

services:
  db:
    image: postgres:14
    restart: always
    environment:
      - POSTGRES_USER=gitea
      - POSTGRES_PASSWORD=gitea
      - POSTGRES_DB=gitea
    networks:
      - gitea
    volumes:
      - ./postgres:/var/lib/postgresql/data

  server:
    image: gitea/gitea:1.17.3
    container_name: gitea
    environment:
      - USER_UID=1002  # git
      - USER_GID=999   # docker
      - GITEA__database__DB_TYPE=postgres
      - GITEA__database__HOST=db:5432
      - GITEA__database__NAME=gitea
      - GITEA__database__USER=gitea
      - GITEA__database__PASSWD=gitea
      - GITEA__security__SECRET_KEY=UVtqmCdTmLwgprrhXiLOOjTENkR1VXhmWCvJ9kwYBp545oGXFJ1Gakz3hk13dtIp
      - GITEA__security__INTERNAL_TOKEN=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE2Njc2ODY4NjZ9.So-OnzTxFU-Ps6jfad9rEZPGNnNBmbcF_wHhjsjF_0g
      - GITEA__openid__ENABLE_OPENID_SIGNIN=true
      - GITEA__openid__ENABLE_OPENID_SIGNUP=true
      - GITEA__service__DISABLE_REGISTRATION=false
      - GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION=true
      - GITEA__service__REGISTER_EMAIL_CONFIRM=false
      - GITEA__service__ENABLE_CAPTCHA=false
      - GITEA__oauth2_client__ENABLE_AUTO_REGISTRATION=true
      - VIRTUAL_HOST=git.cttue.de
      - VIRTUAL_PORT=3000
      - LETSENCRYPT_HOST=git.cttue.de
    restart: always
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik
      - traefik.http.routers.git.entrypoints=web-secure
      - traefik.http.routers.git.service=git
      - traefik.http.routers.git.rule=Host(`git.cttue.de`)
      - traefik.http.routers.git.tls=true
      - traefik.http.routers.git.tls.certResolver=default
      - traefik.http.routers.git.tls.domains[0]=cttue.de
      - traefik.http.routers.git.tls.domains[0].sans=git.cttue.de
      - traefik.http.services.git.loadbalancer.server.port=3000
    networks:
      - traefik
      - gitea
    ports:
      - 127.0.0.1:2222:22
    volumes:
      - ./gitea-data:/data
      - /home/git/.ssh/:/data/git/.ssh
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro


networks:
  gitea:
  traefik:
    external: true