services:
  gitea:
    image: gitea/gitea:latest
    container_name: gitea_gitea
    restart: always
    env_file:
      - path: /run/secrets/gitea/gitea
        required: true
    networks:
      - web
      - gitea
    volumes:
      - $APPDATA/gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "2225:22"
    labels:
      - traefik.http.routers.gitea.rule=Host(`git.jafner.net`)
      - traefik.http.routers.gitea.tls.certresolver=lets-encrypt
      - traefik.http.routers.gitea.tls.options=tls12@file
      - traefik.http.routers.gitea.middlewares=securityheaders@file
      - traefik.http.routers.gitea.service=gitea
      - traefik.http.services.gitea.loadbalancer.server.port=3000

  postgres:
    image: postgres:13
    container_name: gitea_postgres
    networks:
      - gitea
    env_file:
      - path: /run/secrets/gitea/postgres
        required: true
    volumes:
      - $APPDATA/postgres:/var/lib/postgresql/data

networks:
  web:
    external: true
  gitea: