defined basic stack

docker-compose.yaml

@@ -0,0 +1,62 @@
+version: "3.9"
+
+networks:
+  traefik-network:
+    name: traefik-network
+    external: true
+
+services:
+  server:
+    image: docker.gitea.com/gitea:1.25.3-rootless
+    networks:
+      - traefik-network
+    restart: always
+    stop_grace_period: 1m # Allow Gitea time to shut down gracefully
+    healthcheck:
+      test: ["CMD", "wget", "-q", "--spider", "http://localhost:3000/api/healthz"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 200s
+
+    volumes:
+      - ./data:/var/lib/gitea
+      - ./config:/etc/gitea
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+
+    # HTTP handled by Traefik; expose is optional but clarifies intent
+    expose:
+      - "3000"
+    ports:
+      - "2222:2222" # SSH port
+
+    environment:
+      # Ensure Gitea generates correct URLs (adjust if you terminate TLS at Traefik)
+      - GITEA__server__DOMAIN=gitea.rezije.app
+      - GITEA__server__ROOT_URL=https://gitea.rezije.app/
+      - GITEA__server__PROTOCOL=http # Traefik handles TLS
+      - GITEA__server__SSH_PORT=2222
+      # Enable Docker Registry support
+      - GITEA__packages__ENABLED=true
+      # Set public URL detection to auto so that server
+      # supports multiple hostnames (for registry and web console)
+      - GITEA__server__PUBLIC_URL_DETECTION=auto
+
+    labels:
+      - traefik.enable=true
+      - traefik.docker.network=traefik-network
+      - traefik.http.services.gitea.loadbalancer.server.port=3000
+
+      # Web Console
+      - traefik.http.routers.gitea.entrypoints=https
+      - traefik.http.routers.gitea.rule=Host(`gitea.rezije.app`)
+      - traefik.http.routers.gitea.tls=true
+      - traefik.http.routers.gitea.tls.certresolver=letsencrypt
+    
+      # Registry (only /v2)
+      - traefik.http.routers.gitea-registry.entrypoints=https
+      - traefik.http.routers.gitea-registry.rule=Host(`registry.budakova.org`) && PathPrefix(`/v2`)
+      - traefik.http.routers.gitea-registry.tls=true
+      - traefik.http.routers.gitea-registry.tls.certresolver=letsencrypt
+      - traefik.http.routers.gitea-registry.service=gitea