services:
  gitea-redis:
    image: redis:7-alpine
    container_name: gitea-redis
    restart: unless-stopped
    command: redis-server --requirepass ${GITEA_REDIS_PASS}
    volumes:
      - gitea_redis:/data

  gitea:
    image: gitea/gitea:latest
    container_name: gitea
    restart: unless-stopped
    depends_on:
      - gitea-redis
    ports:
      - "3000:3000"
      - "222:22"
    environment:
      USER_UID: "1000"
      USER_GID: "1000"
      GITEA__database__DB_TYPE: postgres
      GITEA__database__HOST: 192.168.1.6:5432
      GITEA__database__NAME: gitea
      GITEA__database__USER: gitea
      GITEA__database__PASSWD: "${GITEA_DB_PASSWORD}"
      GITEA__server__DOMAIN: git.nuclide.systems
      GITEA__server__ROOT_URL: "https://git.nuclide.systems"
      GITEA__server__SSH_DOMAIN: git.nuclide.systems
      GITEA__server__SSH_PORT: "222"
      GITEA__queue__TYPE: redis
      GITEA__queue__CONN_STR: "redis://:${GITEA_REDIS_PASS}@gitea-redis:6379/0"
      GITEA__cache__ADAPTER: redis
      GITEA__cache__HOST: "redis://:${GITEA_REDIS_PASS}@gitea-redis:6379/1"
      GITEA__session__PROVIDER: redis
      GITEA__session__PROVIDER_CONFIG: "redis://:${GITEA_REDIS_PASS}@gitea-redis:6379/2"
      GITEA__oauth2__ENABLED: "true"
      GITEA__openid__ENABLE_OPENID_SIGNIN: "false"
      GITEA__openid__ENABLE_OPENID_SIGNUP: "false"
      GITEA__service__ENABLE_PASSWORD_SIGNIN_FORM: "false"
      GITEA__oauth2_client__ENABLE_AUTO_REGISTRATION: "true"
      GITEA__oauth2_client__ACCOUNT_LINKING: "auto"
      GITEA__oauth2_client__USERNAME: "preferred_username"
      GITEA__oauth2_client__UPDATE_AVATAR: "true"
      GITEA__pages__ENABLED: "true"
      GITEA__pages__DOMAIN: "pages.nuclide.systems"
      GITEA__server__REVERSE_PROXY_LIMIT: "1"
      GITEA__server__REVERSE_PROXY_TRUSTED_PROXIES: "10.0.12.2,172.16.0.0/12,192.168.0.0/16"
    volumes:
      - /mnt/pve/unas/services/gitea:/data

volumes:
  gitea_redis: