networks:
  gitea_network:
    external: false
  TRAEFIK_NETWORK:
    external: true

services:
  server:
    image: gitea/gitea:latest
    container_name: gitea
    restart: unless-stopped
    depends_on:
      - database
    environment:
      - USER_UID=GITEA_USER_ID
      - USER_GID=GITEA_USER_GROUP_ID
      - DOMAIN=SUBDOMAIN_URL
      - PROTOCOL=http
      - GITEA__database__DB_TYPE=postgres
      - GITEA__database__HOST=database:5432
      - GITEA__database__NAME=GITEA_DB_NAME
      - GITEA__database__USER=GITEA_DB_USER
      - GITEA__database__PASSWD=GITEA_DB_PASS
      - GITEA__service__DISABLE_REGISTRATION=true
      - GITEA__openid__ENABLE_OPENID_SIGNUP=DISABLE_REGISTRATION
      - GITEA__openid__ENABLE_OPENID_SIGNIN=false
      - GITEA__server__ROOT_URL=SUBDOMAIN_URL
      - GITEA__server__LOCAL_ROOT_URL=HTTP_SUBDOMAIN_URL
      - GITEA__server__SSH_DOMAIN=SUBDOMAIN_URL
      - GITEA__server__SSH_PORT=HOST_SSH_PORT
      - GITEA__server__SSH_LISTEN_PORT=HOST_SSH_PORT
      - GITEA__server__START_SSH_SERVER=true
    networks:
      - gitea_network
      - TRAEFIK_NETWORK
    ports:
      - "HOST_SSH_PORT:22"
    volumes:
      - /pwspool/software/gitea/gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    labels:
      - traefik.http.routers.gitea.rule=Host(`SUBDOMAIN_URL`)
      - traefik.http.routers.gitea.tls=true
      - traefik.http.routers.gitea.tls.certresolver=lets-encrypt
      - traefik.http.services.gitea.loadbalancer.server.port=3000

  database:
    image: postgres:14
    networks:
      - gitea_network
    restart: unless-stopped
    environment:
      - POSTGRES_USER=GITEA_DB_USER
      - POSTGRES_PASSWORD=GITEA_DB_PASS
      - POSTGRES_DB=GITEA_DB_NAME
    volumes:
      - /pwspool/software/gitea/database:/var/lib/postgresql/data
    labels:
      - traefik.enable=false