gitea/docker-compose.yml
hcornet f02ae0f00e
Some checks are pending
Deployment Verification / deploy-and-test (push) Waiting to run
first sync
2025-01-10 20:23:04 +01:00

253 lines
8.8 KiB
YAML

#### NETWORKS
networks:
traefik_front_network:
external: true
back_network_gitea:
driver: bridge
attachable: true
#### SERVICES
services:
gitea:
container_name: gitea-app
hostname: gitea-app
image: ${GITEA_IMAGE_TAG}
environment:
- USER_UID=1000
- USER_GID=1000
- GITEA__database__DB_TYPE=postgres
- GITEA__database__HOST=postgres:5432
- GITEA__database__NAME=${POSTGRE_DB_NAME}
- GITEA__database__USER=${POSTGRE_DB_USER}
- GITEA__database__PASSWD=${POSTGRE_DB_PASSWORD}
- GITEA__database__LOG_SQL=true
- GITEA__database__SCHEMA=public
- GITEA__database__SSL_MODE=disable
- GITEA__mailer__ENABLED=true
- GITEA__mailer__FROM=hostinfo@tips-of-mine.fr
- GITEA__mailer__PROTOCOL=smtp
- GITEA__mailer__SMTP_ADDR=gitea-msmtpd
- GITEA__mailer__SMTP_PORT=2500
- GITEA__mailer__USER=
- GITEA__mailer__PASSWD=
- GITEA__admin__USER=${GITEA_ADMIN_USERNAME}
- GITEA__admin__PASSWORD=${GITEA_ADMIN_PASSWORD}
- GITEA__admin__EMAIL=${GITEA_ADMIN_EMAIL}
- GITEA__server__DOMAIN=${GITEA_HOSTNAME}
- GITEA__server__SSH_DOMAIN=${GITEA_HOSTNAME}
- GITEA__server__ROOT_URL=${GITEA_URL}
- GITEA__server__HTTP_PORT=${GITEA_HTTP_PORT}
- GITEA__server__SSH_PORT=${GITEA_SSH_PORT}
- GITEA__server__SSH_LISTEN_PORT=${GITEA_SSH_LISTEN_PORT}
- GITEA__server__DISABLE_SSH=false
- GITEA__server__START_SSH_SERVER=false
- GITEA__server__OFFLINE_MODE=false
- GITEA__repository__USE_COMPAT_SSH_URI=false
- GITEA__repository__DEFAULT_BRANCH=main
- GITEA__actions__ENABLED=true
- GITEA__metrics__ENABLED=true
- GITEA__metrics__ENABLED_ISSUE_BY_REPOSITORY=true
- GITEA__metrics__ENABLED_ISSUE_BY_LABEL=true
- GITEA__service__DISABLE_REGISTRATION=false
- GITEA__service__REQUIRE_SIGNIN_VIEW=false
- GITEA__service__REGISTER_EMAIL_CONFIRM=true
- GITEA__service__ENABLE_NOTIFY_MAIL=true
- GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION=false
- GITEA__service__ENABLE_CAPTCHA=true
- GITEA__service__DEFAULT_KEEP_EMAIL_PRIVATE=false
- GITEA__service__DEFAULT_ALLOW_CREATE_ORGANIZATION=false
- GITEA__service__DEFAULT_ENABLE_TIMETRACKING=true
- GITEA__service__NO_REPLY_ADDRESS=${GITEA_NOREPLY_EMAIL}
- GITEA__RUN_MODE=prod
- GITEA__APP_NAME=Gitea
restart: always
networks:
- back_network_gitea
- traefik_front_network
volumes:
- ./gitea:/data:rw
- ./custom:/app/gitea/custom:rw
- ./log:/app/gitea/log:rw
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
# ports:
# - "3080:3000"
# - "222:222"
depends_on:
postgres:
condition: service_healthy
healthcheck:
test: ["CMD", "curl", "-f", "http://gitea.tips-of-mine.com/"]
interval: 10s
timeout: 5s
retries: 3
start_period: 90s
labels:
- "traefik.enable=true"
- "traefik.docker.network=traefik_front_network"
# HTTP
- "traefik.http.routers.gitea-http.rule=Host(`gitea.tips-of-mine.com`)"
- "traefik.http.routers.gitea-http.entrypoints=http"
- "traefik.http.routers.gitea-http.priority=49"
# HTTPS
- "traefik.http.routers.gitea-https.rule=Host(`gitea.tips-of-mine.com`)"
- "traefik.http.routers.gitea-https.entrypoints=https"
- "traefik.http.routers.gitea-https.tls=true"
- "traefik.http.routers.gitea-https.priority=50"
- "traefik.http.routers.gitea.service=gitea-https-service"
# SSH
- "traefik.tcp.routers.gitea-ssh.rule=HostSNI(`*`)"
- "traefik.tcp.routers.gitea-ssh.entrypoints=ssh"
- "traefik.tcp.routers.gitea-ssh.service=gitea-ssh-service"
# Middleware
# Service
- "traefik.http.services.gitea-https-service.loadbalancer.server.port=3000"
# - "traefik.http.services.gitea-https-service.loadbalancer.server.scheme=https"
# - "traefik.http.services.gitea-https-service.loadbalancer.healthcheck.hostname=gitea.traefik.me"
# - "traefik.http.services.gitea-https-service.loadbalancer.healthcheck.method=foobar"
# - "traefik.http.services.gitea-https-service.loadbalancer.healthcheck.timeout=10"
# - "traefik.http.services.gitea-https-service.loadbalancer.healthcheck.interval=30"
- "traefik.tcp.services.gitea-ssh-service.loadbalancer.server.port=22"
# - "traefik.tcp.services.gitea-ssh-service.loadbalancer.server.tls=true"
### postgres
postgres:
container_name: gitea-postgres
hostname: gitea-postgres
image: ${POSTGRES_IMAGE_TAG}
environment:
PGDATA: ${POSTGRE_DB_DATA}
POSTGRES_DB: ${POSTGRE_DB_NAME}
POSTGRES_PASSWORD: ${POSTGRE_DB_PASSWORD}
POSTGRES_USER: ${POSTGRE_DB_USER}
TZ: Europe/Paris
restart: unless-stopped
networks:
- back_network_gitea
volumes:
- ./data:/var/lib/postgresql/data:rw
healthcheck:
test: [ "CMD", "pg_isready", "-q", "-d", "${POSTGRE_DB_NAME}", "-U", "${POSTGRE_DB_USER}" ]
interval: 10s
timeout: 5s
retries: 3
start_period: 60s
### adminer
# adminer:
# container_name: gitea-adminer
# hostname: gitea-adminer
# image: ${ADMINER_IMAGE_TAG}
# restart: always
# networks:
# - back_network
# - traefik_front_network
# depends_on:
# postgres:
# condition: service_healthy
# labels:
# - "traefik.enable=true"
# - "traefik.docker.network=traefik_front_network"
# HTTP
# - "traefik.http.routers.adminer-http.rule=Host(`gitea-adminer.traefik.me`)"
# - "traefik.http.routers.adminer-http.entrypoints=http"
# HTTPS
# - "traefik.http.routers.adminer-https.rule=Host(`gitea-adminer.traefik.me`)"
# - "traefik.http.routers.adminer-https.entrypoints=https"
# - "traefik.http.routers.adminer-https.tls=true"
# - "traefik.http.routers.adminer.service=adminer-service"
# Middleware
# Service
# - "traefik.http.services.adminer-service.loadbalancer.server.port=8080"
### backups
backups:
container_name: gitea-postgres-backup
hostname: gitea-postgres-backup
image: ${POSTGRES_IMAGE_TAG}
command: >-
sh -c 'sleep $BACKUP_INIT_SLEEP &&
while true; do
pg_dump -h postgres -p 5432 -d $POSTGRE_DB_NAME -U $POSTGRE_DB_USER | gzip > $POSTGRES_BACKUPS_PATH/$POSTGRES_BACKUP_NAME-$(date "+%Y-%m-%d_%H-%M").gz &&
tar -zcpf $DATA_BACKUPS_PATH/$DATA_BACKUP_NAME-$(date "+%Y-%m-%d_%H-%M").tar.gz $DATA_PATH &&
find $POSTGRES_BACKUPS_PATH -type f -mtime +$POSTGRES_BACKUP_PRUNE_DAYS | xargs rm -f &&
find $DATA_BACKUPS_PATH -type f -mtime +$DATA_BACKUP_PRUNE_DAYS | xargs rm -f;
sleep $BACKUP_INTERVAL; done'
environment:
GITEA_DB_NAME: ${POSTGRE_DB_NAME}
GITEA_DB_USER: ${POSTGRE_DB_USER}
PGPASSWORD: ${POSTGRE_DB_PASSWORD}
BACKUP_INIT_SLEEP: ${BACKUP_INIT_SLEEP}
BACKUP_INTERVAL: ${BACKUP_INTERVAL}
POSTGRES_BACKUP_PRUNE_DAYS: ${POSTGRES_BACKUP_PRUNE_DAYS}
DATA_BACKUP_PRUNE_DAYS: ${DATA_BACKUP_PRUNE_DAYS}
POSTGRES_BACKUPS_PATH: ${POSTGRES_BACKUPS_PATH}
DATA_BACKUPS_PATH: ${DATA_BACKUPS_PATH}
DATA_PATH: ${DATA_PATH}
POSTGRES_BACKUP_NAME: ${POSTGRES_BACKUP_NAME}
DATA_BACKUP_NAME: ${DATA_BACKUP_NAME}
restart: unless-stopped
networks:
- back_network_gitea
volumes:
- ./backup/data:/var/lib/postgresql/data
- ./backup/gitea:${DATA_PATH}
- ./backup/backups:${DATA_BACKUPS_PATH}
- ./backup/database:${POSTGRES_BACKUPS_PATH}
depends_on:
postgres:
condition: service_healthy
### runner
runner:
container_name: gitea-runner
hostname: gitea-runner
image: gitea/act_runner:latest
environment:
- GITEA_INSTANCE_URL=${GITEA_URL}
- GITEA_RUNNER_REGISTRATION_TOKEN=v1bOsBNZeoJ0P3fGHsyEoqxcpBoLc8xTBByhnB5I
- GITEA_RUNNER_NAME=gitea-runner
restart: unless-stopped
networks:
- back_network_gitea
volumes:
# - ./data-runner:/data
- /etc/ssl/certs/:/etc/ssl/certs:ro
# - ./data-runner/cache:/root/.cache
# - ./config.yaml:/config.yaml
- /var/run/docker.sock:/var/run/docker.sock
privileged: true
depends_on:
gitea:
condition: service_healthy
### msmtpd
msmtpd:
container_name: gitea-msmtpd
hostname: gitea-msmtpd
image: crazymax/msmtpd:latest
networks:
- back_network_gitea
# ports:
# - 2500:2500
environment:
- "TZ=Europe/Paris"
- "PUID=1500"
- "PGID=1500"
- "SMTP_HOST=10.0.4.52"
- "SMTP_PORT=587"
- "SMTP_TLS=on"
- "SMTP_STARTTLS=on"
- "SMTP_TLS_CHECKCERT=off"
- "SMTP_AUTH=on"
- "SMTP_USER=hostinfo@tips-of-mine.fr"
- "SMTP_PASSWORD=P@ssword!Here!123456"
- "SMTP_DOMAIN=localhost"
- "SMTP_FROM=hostinfo@tips-of-mine.fr"
restart: always
healthcheck:
test: ["CMD-SHELL", "echo EHLO localhost"]
interval: 5s
timeout: 5s
retries: 5