services:
  gitea:
    image: gitea/gitea:latest
    container_name: gitea
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    environment:
      TZ: Europe/Berlin
      GITEA__DEFAULT__APP_NAME: KalliLab Gitea
      GITEA__server__DOMAIN: git.kaleschke.info
      GITEA__server__ROOT_URL: https://git.kaleschke.info
      GITEA__server__HTTP_PORT: 3000
      GITEA__server__SSH_DOMAIN: git.kaleschke.info
      GITEA__server__SSH_PORT: 222
      GITEA__server__START_SSH_SERVER: "true"
    volumes:
      - /mnt/user/appdata/gitea:/data
    ports:
      - "222:22"
    networks:
      - frontend_net
    labels:
      - traefik.enable=true
      - traefik.docker.network=frontend_net
      - traefik.http.routers.gitea.rule=Host(`git.kaleschke.info`)
      - traefik.http.routers.gitea.entrypoints=websecure
      - traefik.http.routers.gitea.tls=true
      - traefik.http.routers.gitea.tls.certresolver=le
      - traefik.http.services.gitea.loadbalancer.server.port=3000

networks:
  frontend_net:
    external: true