feat: full untested ansible setup

roles/gitea/templates/compose.yaml.j2

@@ -0,0 +1,28 @@
+services:
+  server:
+    image: {{ gitea.image }}
+    container_name: gitea
+    restart: unless-stopped
+    environment:
+      USER_UID: "{{ gitea_runtime_uid }}"
+      USER_GID: "{{ gitea_runtime_gid }}"
+      GITEA__security__SECRET_KEY: "{{ vault_gitea_secret_key | default('change-me') }}"
+      GITEA__security__INTERNAL_TOKEN: "{{ vault_gitea_internal_token | default('change-me') }}"
+      GITEA__security__LFS_JWT_SECRET: "{{ vault_gitea_lfs_jwt_secret | default('change-me') }}"
+      GITEA__server__DOMAIN: "{{ gitea.domain }}"
+      GITEA__server__ROOT_URL: "https://{{ gitea.domain }}/"
+      GITEA__server__PROTOCOL: "http"
+      GITEA__server__SSH_DOMAIN: "{{ gitea.domain }}"
+      GITEA__server__SSH_PORT: "{{ gitea.ssh_port }}"
+      GITEA__server__HTTP_PORT: "{{ gitea.http_port }}"
+    ports:
+      - "{{ gitea.http_bind_address }}:{{ gitea.http_port }}:3000"
+      - "{{ gitea.ssh_port }}:22"
+    volumes:
+      - "{{ gitea.data_dir }}:/data"
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+
+networks:
+  default:
+    name: {{ gitea.compose_project_name }}