#### NETWORKS
networks:
  docker-traefik_front_network:
    external: true
  back_network:
    driver: bridge
    attachable: true

#### SERVICES
services:

### gitea
  gitea:
    container_name: gitea-app
    hostname: gitea-app
    image: gitea/gitea:${GITEA_VERSION}
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - GITEA__database__DB_TYPE=postgres
      - GITEA__database__HOST=db:5432
      - GITEA__database__NAME=gitea
      - GITEA__database__USER=gitea
      - GITEA__database__PASSWD=gitea
    restart: always
    volumes:
      - ./gitea:/data
    depends_on:
      - postgres
    networks:
      - back_network
      - docker-traefik_front_network
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.gitea-secure.entrypoints=https"
      - "traefik.http.routers.gitea-secure.rule=Host(`gitea.jimsgarage.co.uk`)"
      - "traefik.http.routers.gitea-secure.tls=true"
      - "traefik.http.routers.gitea-secure.service=gitea@docker"
      - "traefik.http.services.gitea.loadbalancer.server.port=3000"
      - "traefik.docker.network=proxy"
    security_opt:
      - no-new-privileges:true

### postgres
  postgres:
    container_name: gitea-postgres
    hostname: gitea-postgres
    image: postgres:14
    restart: always
    environment:
      PGDATA: /var/lib/postgresql/data/gitea
      POSTGRES_DB: gitea_db
      POSTGRES_PASSWORD: 'P@ssword!Here!123456'
      POSTGRES_USER: gitea_user
      TZ: Europe/Paris
    volumes:
      - ./postgres:/var/lib/postgresql/data
    networks:
      - back_network