name: gitea
secrets:
  SMTP_USERNAME:
    file: "./secrets/mail/SMTP_USERNAME"
  SMTP_PASSWORD:
    file: "./secrets/mail/SMTP_PASSWORD"
services:
  server:
    image: gitea/gitea:latest
    container_name: gitea_app
    restart: always
    secrets:
      - SMTP_USERNAME
      - SMTP_PASSWORD
    environment:
      USER_UID: 1000
      USER_GID: 1000
      GITEA__server__ROOT_URL: https://gitea.64815139.xyz
      GITEA__service__DISABLE_REGISTRATION: false
      GITEA__service__ENABLE_BASIC_AUTHENTICATION: false
      GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION: true
      GITEA__service__SHOW_REGISTRATION_BUTTON: false
      GITEA__service__ENABLE_NOTIFY_MAIL: true
      GITEA__mailer__ENABLED: true
      GITEA__mailer__FROM: "Gitea <gitea@64815139.xyz>"
      GITEA__mailer__PROTOCOL: smtp+starttls
      GITEA__mailer__SMTP_ADDR: in-v3.mailjet.com
      GITEA__mailer__SMTP_PORT: 587
      GITEA__mailer__USER__FILE: /run/secrets/SMTP_USERNAME
      GITEA__mailer__PASSWD__FILE: /run/secrets/SMTP_PASSWORD
      GITEA__openid__ENABLE_OPENID_SIGNIN: true
      GITEA__openid__ENABLE_OPENID_SIGNUP: true
      GITEA__openid__WHITELISTED_URLS: auth.64815139.xyz
      GITEA__oauth2_client__ENABLE_AUTO_REGISTRATION: true
      GITEA__oauth2_client__ACCOUNT_LINKING: auto
      GITEA__oauth2_client__USERNAME: nickname
      GITEA__oauth2_client__OPENID_CONNECT_SCOPES: openid profile email
    networks:
      - default
    volumes:
      - ./data:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "3000:3000"
      - "222:22"
  watchtower:
    image: containrrr/watchtower
    container_name: gitea_watchtower
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
networks:
  default:
    external: false