feat(deploy): add canonical Gitea recovery flows

2026-08-22 11:14:33 +03:00
parent a9ea31f00a
commit 502acd3771
14 changed files with 15257 additions and 4 deletions
@@ -0,0 +1,62 @@
+name: nodedc-gitea
+
+services:
+  gitea:
+    image: docker.gitea.com/gitea:1.27.2-rootless@sha256:7de5f49ada687b8c8d2938f547cdb7634839764ba51f297457bae35cee3abd2c
+    platform: linux/amd64
+    pull_policy: never
+    network_mode: none
+    user: "1000:1000"
+    entrypoint:
+      - /usr/local/bin/gitea
+    command:
+      - web
+      - --config
+      - /etc/gitea/app.ini
+    restart: "no"
+    stop_grace_period: 30s
+    init: true
+    read_only: true
+    cap_drop:
+      - ALL
+    security_opt:
+      - no-new-privileges:true
+    pids_limit: 512
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "3"
+    environment:
+      USER: git
+      HOME: /data/gitea
+      GITEA_WORK_DIR: /data/gitea
+      GITEA_CUSTOM: /data/gitea
+    volumes:
+      - type: bind
+        source: /volume1/docker/nodedc-gitea/data
+        target: /data
+        bind:
+          create_host_path: false
+      - type: bind
+        source: /volume1/docker/nodedc-gitea/config
+        target: /etc/gitea
+        read_only: true
+        bind:
+          create_host_path: false
+      - type: bind
+        source: /volume1/docker/nodedc-gitea/socket
+        target: /run/gitea
+        bind:
+          create_host_path: false
+    secrets:
+      - gitea_secret_key
+      - gitea_internal_token
+    tmpfs:
+      - /tmp:rw,noexec,nosuid,nodev,size=256m
+
+secrets:
+  gitea_secret_key:
+    file: /volume1/docker/nodedc-gitea/secrets/secret-key
+  gitea_internal_token:
+    file: /volume1/docker/nodedc-gitea/secrets/internal-token