Add Gitea - Git with a cup of teak

homelab/.env.example

@@ -2,8 +2,10 @@ VAULT_DOMAIN=vault.example.com
 AUTH_DOMAIN=auth.example.com
 STORAGE_DOMAIN=storage.example.com
 VPN_DOMAIN=vpn.example.com
+GITEA_DOMAIN=gitea.example.com
 EMAIL=mail@example.com
 TWOFAUTH_APP_KEY=32characterslongrandomstring!
 WG_EASY_PASSWORD_HASH=your_bcrypt_hashed_password
 PORKBUN_API_KEY=your_porkbun_api_key
-PORKBUN_API_SECRET=your_porkbun_api_secret
+PORKBUN_API_SECRET=your_porkbun_api_secret
+GITEA_DB_PASSWORD=your_gitea_database_password

homelab/Caddyfile

@@ -55,3 +55,15 @@
     reverse_proxy wg-easy:51821
 }
 
+# ===========================
+# Gitea
+# ===========================
+{env.VPN_DOMAIN} {
+    import dns_porkbun
+
+    encode gzip
+    tls internal
+    reverse_proxy gitea:3000
+}
+
+

homelab/compose.yml

@@ -77,6 +77,49 @@ services:
     networks:
       - proxy
 
+  # ==========================
+  # Gitea Database (PostgreSQL)
+  # ==========================
+  gitea-db:
+    image: postgres:15
+    container_name: gitea-db
+    restart: always
+    environment:
+      POSTGRES_USER: gitea
+      POSTGRES_PASSWORD: ${GITEA_DB_PASSWORD}
+      POSTGRES_DB: gitea
+    volumes:
+      - ./services/gitea/postgres:/var/lib/postgresql/data
+    networks:
+      - proxy
+
+  # ==========================
+  # Gitea (Git service)
+  # ==========================
+  gitea:
+    image: gitea/gitea:latest
+    container_name: gitea
+    restart: always
+    depends_on:
+      - gitea-db
+    environment:
+      USER_UID: 1000
+      USER_GID: 1000
+      GITEA__database__DB_TYPE: postgres
+      GITEA__database__HOST: gitea-db:5432
+      GITEA__database__NAME: gitea
+      GITEA__database__USER: gitea
+      GITEA__database__PASSWD: ${GITEA_DB_PASSWORD}
+    volumes:
+      - ./services/gitea/data:/data
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+    ports:
+      - "3000:3000"
+      - "222:22"
+    networks:
+      - proxy
+
   # ==========================
   # Caddy (Reverse proxy)
   # ==========================
@@ -100,6 +143,7 @@ services:
       AUTH_DOMAIN: ${AUTH_DOMAIN}
       STORAGE_DOMAIN: ${STORAGE_DOMAIN}
       VPN_DOMAIN: ${VPN_DOMAIN}
+      GITEA_DOMAIN: ${GITEA_DOMAIN}
       EMAIL: ${EMAIL}
       PORKBUN_API_KEY: ${PORKBUN_API_KEY}
       PORKBUN_API_SECRET: ${PORKBUN_API_SECRET}
@@ -166,5 +210,5 @@ services:
       - /sys:/host/sys:ro
 
 networks:
-  default:
+  proxy:
     driver: bridge