2024-10-20 18:37:46 +02:00
|
|
|
networks:
|
|
|
|
|
gitea:
|
|
|
|
|
external: false
|
|
|
|
|
enable_ipv6: true
|
|
|
|
|
|
|
|
|
|
volumes:
|
|
|
|
|
server:
|
|
|
|
|
driver: local
|
|
|
|
|
|
|
|
|
|
services:
|
|
|
|
|
server:
|
2024-12-12 19:50:16 +01:00
|
|
|
image: codeberg.org/forgejo/forgejo:9.0.3
|
2024-10-20 18:37:46 +02:00
|
|
|
restart: always
|
|
|
|
|
container_name: forgejo
|
2024-10-20 20:38:07 +02:00
|
|
|
env_file:
|
|
|
|
|
- .env
|
2024-10-20 18:37:46 +02:00
|
|
|
environment:
|
|
|
|
|
- USER_UID=1000
|
|
|
|
|
- USER_GID=1000
|
|
|
|
|
- FORGEJO__database__DB_TYPE=postgres
|
|
|
|
|
- FORGEJO__cache__ENABLED=true
|
|
|
|
|
- FORGEJO__cache__ADAPTER=redis
|
|
|
|
|
- FORGEJO__cache__HOST=redis://cache:6379/0?pool_size=100&idle_timeout=180s
|
|
|
|
|
- FORGEJO__indexer__REPO_INDEXER_ENABLED=false
|
|
|
|
|
- FORGEJO__webhook__ALLOWED_HOST_LIST="cicd.gnous.eu,build.net.enpls.org,deploy.net.enpls.org"
|
|
|
|
|
- FORGEJO__service__REGISTER_EMAIL_CONFIRM=true
|
|
|
|
|
- FORGEJO__service__DISABLE_REGISTRATION=false
|
|
|
|
|
- FORGEJO__service__ENABLE_CAPTCHA=true
|
|
|
|
|
- FORGEJO__security__PASSWORD_HASH_ALGO=argon2
|
|
|
|
|
- FORGEJO__session__PROVIDER=db
|
|
|
|
|
- FORGEJO__security__LOGIN_REMEMBER_DAYS=365
|
|
|
|
|
- FORGEJO__log__LEVEL=info
|
|
|
|
|
- FORGEJO__log__MODE=console
|
|
|
|
|
- FORGEJO__ui__DEFAULT_THEME=gitea-auto
|
|
|
|
|
- FORGEJO__ui.meta__AUTHOR="GnousGit"
|
|
|
|
|
- FORGEJO__ui.meta__KEYWORDS="gitea,forge,forgejo,free,software,open,source,code,foss,oss,gnous,gnouseu"
|
|
|
|
|
- FORGEJO__cron.delete_inactive_accounts__ENABLED=true
|
|
|
|
|
- FORGEJO__cron.delete_inactive_accounts__SCHEDULE="@every 48h"
|
|
|
|
|
- FORGEJO__cron.delete_inactive_accounts__OLDER_THAN="48h"
|
|
|
|
|
- FORGEJO__markup.asciidoc__ENABLED=true
|
|
|
|
|
- FORGEJO__markup.asciidoc__FILE_EXTENSIONS=.adoc,.asciidoc
|
|
|
|
|
- FORGEJO__markup.asciidoc__RENDER_COMMAND="timeout 30s sudo -u nobody asciidoctor -s --safe-mode secure -a data-uri -a showtitle --out-file=- -"
|
|
|
|
|
- FORGEJO__markup.asciidoc__IS_INPUT_FILE=false
|
|
|
|
|
- FORGEJO__markup.pandoc_rst__ENABLED=true
|
|
|
|
|
- FORGEJO__markup.pandoc_rst__FILE_EXTENSIONS=.rst
|
|
|
|
|
- FORGEJO__markup.pandoc_rst__RENDER_COMMAND="timeout 30s sudo -u nobody pandoc +RTS -M512M -RTS -f rst"
|
|
|
|
|
- FORGEJO__markup.pandoc_rst__IS_INPUT_FILE=false
|
|
|
|
|
- FORGEJO__mailer__SMTP_ADDR=mx.gnous.eu
|
|
|
|
|
- FORGEJO__mailer__SMTP_PORT=587
|
2024-10-20 20:38:07 +02:00
|
|
|
# - FORGEJO__mailer__FROM=${SMTP_USER}
|
|
|
|
|
# - FORGEJO__mailer__USER=${SMTP_USER}
|
|
|
|
|
# - FORGEJO__mailer__PASSWD=${SMTP_PASS}
|
|
|
|
|
# - FORGEJO__database__HOST=${MEP_DB_HOST}
|
|
|
|
|
# - FORGEJO__database__NAME=${FORGEJO_DB_NAME}
|
|
|
|
|
# - FORGEJO__database__USER=${FORGEJO_DB_USER}
|
|
|
|
|
# - FORGEJO__database__PASSWD=${FORGEJO_DB_PASS}
|
2024-10-20 18:37:46 +02:00
|
|
|
networks:
|
|
|
|
|
- gitea
|
|
|
|
|
volumes:
|
|
|
|
|
- server:/data
|
|
|
|
|
- /etc/timezone:/etc/timezone:ro
|
|
|
|
|
- /etc/localtime:/etc/localtime:ro
|
|
|
|
|
ports:
|
|
|
|
|
- "3001:3000"
|
|
|
|
|
- "3002:22"
|
|
|
|
|
labels:
|
|
|
|
|
- "traefik.enable=true"
|
|
|
|
|
# web server
|
|
|
|
|
- "traefik.http.services.forgejo-service-gnous.loadbalancer.server.port=3001"
|
|
|
|
|
- "traefik.http.routers.forgejognous.rule=Host(`git.gnous.eu`)"
|
|
|
|
|
- "traefik.http.routers.forgejognous.tls=true"
|
|
|
|
|
- "traefik.http.routers.forgejognous.tls.certresolver=defaultacme"
|
|
|
|
|
- "traefik.http.routers.forgejognous.entrypoints=websecure"
|
|
|
|
|
- "traefik.http.routers.forgejognous.service=forgejo-service-gnous"
|
|
|
|
|
- "traefik.http.routers.forgejognous.middlewares=proxyHeader@file,proxyError@file"
|
|
|
|
|
# ssh service
|
|
|
|
|
- "traefik.tcp.routers.forgejo-ssh-gnous.entrypoints=ssh"
|
|
|
|
|
- "traefik.tcp.routers.forgejo-ssh-gnous.rule=HostSNI(`*`)"
|
|
|
|
|
- "traefik.tcp.routers.forgejo-ssh-gnous.service=forgejo-ssh-gnous"
|
|
|
|
|
- "traefik.tcp.services.forgejo-ssh-gnous.loadbalancer.server.port=3002"
|
|
|
|
|
depends_on:
|
|
|
|
|
- cache
|
|
|
|
|
cache:
|
|
|
|
|
image: "redis:7-alpine"
|
|
|
|
|
restart: always
|
|
|
|
|
healthcheck:
|
|
|
|
|
test: ["CMD", "redis-cli", "ping"]
|
|
|
|
|
networks:
|
|
|
|
|
- gitea
|
|
|
|
|
tmpfs:
|
|
|
|
|
- "/var/lib/redis"
|
