networks:
  gitea:
    external: false
  proxy-net:
    external: true

name: gitea
services:
  app:
    image: gitea/gitea:latest
    environment:
      USER_UID: 141
      USER_GID: 150
      GITEA__database__DB_TYPE: postgres
      GITEA__database__HOST: gitea-db-1:5432
      GITEA__database__NAME: ${GITEA_DB_NAME}
      GITEA__database__USER: ${GITEA_DB_USER}
      GITEA__database__PASSWD__FILE: /run/secrets/postgres_pass
      GITEA__server__SSH_AUTHORIZED_KEYS_COMMAND_TEMPLATE: gitea --config={{.CustomConf}} serv key-{{.Key.ID}}
      GITEA__service__ENABLE_REVERSE_PROXY_AUTHENTICATION: true
      GITEA__service__ENABLE_REVERSE_PROXY_AUTO_REGISTRATION: true
      GITEA__service__ENABLE_REVERSE_PROXY_EMAIL: true
    restart: unless-stopped
    networks:
      - gitea
      - proxy-net
    volumes:
      - ./data/gitea:/data
      - /home/git/.ssh/:/data/git/.ssh
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "127.0.0.1:2222:22"
    expose:
      - "3000"
    depends_on:
      - db
    secrets:
      - postgres_pass

  db:
    image: postgres:14
    restart: unless-stopped
    environment:
      POSTGRES_USER: ${GITEA_DB_USER}
      POSTGRES_PASSWORD_FILE: /run/secrets/postgres_pass
      POSTGRES_DB: ${GITEA_DB_NAME}
    networks:
      - gitea
    volumes:
      - ./data/postgres:/var/lib/postgresql/data
    secrets:
      - postgres_pass

secrets:
  postgres_pass:
    file: ./secrets/POSTGRES_PASS