version: "3"

services:
  server:
    image: docker.gitea.com/gitea:1.23.7
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - GITEA__database__DB_TYPE=postgres
      - GITEA__database__HOST=db:5432
      - GITEA__database__NAME=gitea
      - GITEA__database__USER=gitea
      - GITEA__database__PASSWD=${POSTGRES_PASSWORD}
      - SSH_INCLUDE_FILE=/etc/ssh/sshd_config.d/*.conf
    restart: always
    networks:
      - internal
      - proxy
    volumes:
      - gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
      # https://github.com/go-gitea/gitea/issues/34179
      - ${PROJECT_PATH-$PWD}/config/ssh_penalties.conf:/etc/ssh/sshd_config.d/penalties.conf
    depends_on:
      - db
    labels:
      traefik.enable: true
      traefik.http.routers.gitea.rule: "Host(`git.urmel.de`)"
      traefik.http.routers.gitea.tls: true
      traefik.http.routers.gitea.tls.certResolver: hetzner
      traefik.http.services.gitea-https.loadbalancer.server.port: 3000
      
      traefik.tcp.routers.gitea.rule: "HostSNI(`*`)"
      traefik.tcp.routers.gitea.entrypoints: public_ssh
      traefik.tcp.services.gitea-ssh.loadbalancer.server.port: 22

  db:
    image: docker.io/library/postgres:14
    restart: always
    environment:
      - POSTGRES_USER=gitea
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_DB=gitea
    networks:
      - internal
    volumes:
      - postgres:/var/lib/postgresql/data

networks:
  internal:
    driver: bridge
    internal: true
  proxy:
    name: traefik_exposed
    external: true
    
volumes:
  postgres:
    name: gitea_postgres
  gitea:
    driver_opts:
      type: nfs4
      o: addr=217.100.0.2,rw,noatime,tcp,uid=1000,gid=1000
      device: ":/mnt/Main/giteaData"