services:
  server:
    image: {{ gitea.image }}
    container_name: gitea
    restart: unless-stopped
    environment:
      USER_UID: "{{ gitea_runtime_uid }}"
      USER_GID: "{{ gitea_runtime_gid }}"
      GITEA__security__SECRET_KEY: "{{ vault_gitea_secret_key | default('change-me') }}"
      GITEA__security__INTERNAL_TOKEN: "{{ vault_gitea_internal_token | default('change-me') }}"
      GITEA__security__LFS_JWT_SECRET: "{{ vault_gitea_lfs_jwt_secret | default('change-me') }}"
      GITEA__server__DOMAIN: "{{ gitea.domain }}"
      GITEA__server__ROOT_URL: "https://{{ gitea.domain }}/"
      GITEA__server__PROTOCOL: "http"
      GITEA__server__SSH_DOMAIN: "{{ gitea.domain }}"
      GITEA__server__SSH_PORT: "{{ gitea.ssh_port }}"
      GITEA__server__HTTP_PORT: "{{ gitea.http_port }}"
    ports:
      - "{{ gitea.http_bind_address }}:{{ gitea.http_port }}:3000"
      - "{{ gitea.ssh_port }}:22"
    volumes:
      - "{{ gitea.data_dir }}:/data"
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro

networks:
  default:
    name: {{ gitea.compose_project_name }}