name: tapm-gitea

services:
  gitea:
    container_name: tapm-gitea
    image: docker.gitea.com/gitea:1.26.4-rootless
    restart: unless-stopped
    env_file:
      - path: ../../.env
        required: false
    networks:
      - edge
    ports:
      - "${GITEA_HTTP_PORT:-3000}:3000"
    volumes:
      - ../../config/gitea/data:/var/lib/gitea
      - ../../config/gitea/config:/etc/gitea
    environment:
      GITEA__database__DB_TYPE: sqlite3
      GITEA__database__PATH: /var/lib/gitea/data/gitea.db
      GITEA__server__DOMAIN: ${GITEA_DOMAIN}
      GITEA__server__ROOT_URL: https://${GITEA_DOMAIN}/
      GITEA__server__DISABLE_SSH: "true"
      GITEA__service__DISABLE_REGISTRATION: "true"
      GITEA__security__INSTALL_LOCK: "true"
    security_opt:
      - no-new-privileges:true
    healthcheck:
      test: ["CMD", "wget", "-q", "-O", "-", "http://127.0.0.1:3000/api/healthz"]
      interval: 30s
      timeout: 5s
      retries: 5
      start_period: 30s

networks:
  edge:
    external: true
    name: tapm-edge