version: '3.9'
services:
  gitea:
    image: gitea/gitea@sha256:59c71717df8b56ed633d50de9d8d2c1671dae2afc08ae142fb04cc2ec4b0ba85
    container_name: gitea_gitea
    env_file:
      - path: ./gitea.env
        required: true
    restart: always
    networks:
      - web
      - gitea
    volumes:
      - $DOCKER_DATA/gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "2225:22"
    labels:
      - traefik.http.routers.gitea.rule=Host(`gitea.jafner.tools`)
      - traefik.http.routers.gitea.tls.certresolver=lets-encrypt
      - traefik.http.routers.gitea.tls.options=tls12@file
      - traefik.http.routers.gitea.middlewares=securityheaders@file
      - traefik.http.routers.gitea.service=gitea
      - traefik.http.services.gitea.loadbalancer.server.port=3000

  postgres:
    image: postgres@sha256:19975f71ce75557051d89ac75af011ba2d370160937dba3d61259e6bf6b9804f
    container_name: gitea_postgres
    networks:
      - gitea
    env_file:
      - path: ./postgres_secrets.env
        required: false
    volumes:
      - postgres_data:/var/lib/postgresql/data
  
  runner-ubuntu:
    image: gitea/act_runner@sha256:48f96921f1163720cfa6a9d362d9154fbe1f7572e616294d78ef12b9ec797f98
    container_name: gitea_runner-ubuntu
    depends_on:
      - gitea
    env_file:
      - path: ./runner-ubuntu.env
        required: true
      - path: ./runner_secrets.env
        required: false
    networks:
      - gitea
    volumes: 
      - ./runner_ubuntu_config.yaml:/config.yaml
      - $DOCKER_DATA/runner-ubuntu:/data
      - /var/run/docker.sock:/var/run/docker.sock

networks:
  web:
    external: true
  gitea:

volumes:
  postgres_data: