# Required in Dokploy environment tab:
# POSTGRES_HOST=
# POSTGRES_DB=
# POSTGRES_USER=
# POSTGRES_PASSWORD=
# GITEA_INTERNAL_TOKEN=
# GITEA_LFS_JWT_SECRET=
# GITEA_OAUTH2_JWT_SECRET=
services:
  app:
    image: gitea/gitea:latest
    environment:
      # System
      - USER_UID=1000
      - USER_GID=1000
      # Database
      - GITEA__database__DB_TYPE=postgres
      - GITEA__database__HOST=${POSTGRES_HOST}:5432
      - GITEA__database__NAME=${POSTGRES_DB}
      - GITEA__database__USER=${POSTGRES_USER}
      - GITEA__database__PASSWD=${POSTGRES_PASSWORD}
      - GITEA__database__SSL_MODE=disable
      - GITEA__database__LOG_SQL=false
      # Server
      - GITEA__server__DOMAIN=gitea.routinedevelopment.ca
      - GITEA__server__HTTP_PORT=3000
      - GITEA__server__ROOT_URL=https://gitea.routinedevelopment.ca
      - GITEA__server__LFS_START_SERVER=true
      - GITEA__server__LFS_JWT_SECRET=${GITEA_LFS_JWT_SECRET}
      - GITEA__server__OFFLINE_MODE=true
      - GITEA__server__SSH_DOMAIN=gitea.routinedevelopment.ca
      - GITEA__server__DISABLE_SSH=false
      - GITEA__server__SSH_PORT=2222
      - GITEA__server__SSH_LISTEN_HOST=0.0.0.0
      - GITEA__server__SSH_LISTEN_PORT=2222
      - GITEA__server__START_SSH_SERVER=true
      - GITEA__server__LANDING_PAGE=explore
      # Repository
      - GITEA__repository__ROOT=/data/git/repositories
      - GITEA__repository__DISABLE_HTTP_GIT=false
      # Repository signing
      - GITEA__repository_0X2E_signing__DEFAULT_TRUST_MODEL=committer
      # Repository pull-request
      - GITEA__repository_0X2E_pull_0X2D_request__DEFAULT_MERGE_STYLE=merge
      # Security
      - GITEA__security__INSTALL_LOCK=true
      - GITEA__security__INTERNAL_TOKEN=${GITEA_INTERNAL_TOKEN}
      - GITEA__security__PASSWORD_HASH_ALGO=pbkdf2
      - GITEA__security__DISABLE_GIT_HOOKS=false
      # LFS
      - GITEA__lfs__PATH=/data/git/lfs
      # Mailer
      - GITEA__mailer__ENABLED=false
      # Service
      - GITEA__service__REGISTER_EMAIL_CONFIRM=false
      - GITEA__service__ENABLE_NOTIFY_MAIL=false
      - GITEA__service__DISABLE_REGISTRATION=true
      - GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION=false
      - GITEA__service__ENABLE_CAPTCHA=false
      - GITEA__service__REQUIRE_SIGNIN_VIEW=false
      - GITEA__service__DEFAULT_KEEP_EMAIL_PRIVATE=false
      - GITEA__service__DEFAULT_ALLOW_CREATE_ORGANIZATION=true
      - GITEA__service__DEFAULT_ENABLE_TIMETRACKING=true
      - GITEA__service__NO_REPLY_ADDRESS=noreply.gitea.routinedevelopment.ca
      # OpenID
      - GITEA__openid__ENABLE_OPENID_SIGNIN=true
      - GITEA__openid__ENABLE_OPENID_SIGNUP=false
      # OAuth2
      - GITEA__oauth2__JWT_SECRET=${GITEA_OAUTH2_JWT_SECRET}
      # Session
      - GITEA__session__PROVIDER=file
      # Log
      - GITEA__log__MODE=console
      - GITEA__log__LEVEL=info
      # Cron
      - GITEA__cron_0X2E_update_checker__ENABLED=false
      # Other
      - GITEA__other__SHOW_FOOTER_POWERED_BY=false
    volumes:
      - gitea-data:/data
    ports:
      - "2222:2222"
    networks:
      - dokploy-network
    labels:
      - "traefik.enable=true"
    restart: unless-stopped
volumes:
  gitea-data:
networks:
  dokploy-network:
    external: true