name: nodedc-gitea

services:
  gitea:
    image: docker.gitea.com/gitea:1.27.2-rootless@sha256:7de5f49ada687b8c8d2938f547cdb7634839764ba51f297457bae35cee3abd2c
    platform: linux/amd64
    pull_policy: never
    network_mode: none
    user: "1000:1000"
    entrypoint:
      - /usr/local/bin/gitea
    command:
      - web
      - --config
      - /etc/gitea/app.ini
    restart: "no"
    stop_grace_period: 30s
    init: true
    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    pids_limit: 512
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"
    environment:
      USER: git
      HOME: /data/gitea
      GITEA_WORK_DIR: /data/gitea
      GITEA_CUSTOM: /data/gitea
    volumes:
      - type: bind
        source: /volume1/docker/nodedc-gitea/data
        target: /data
        bind:
          create_host_path: false
      - type: bind
        source: /volume1/docker/nodedc-gitea/config
        target: /etc/gitea
        read_only: true
        bind:
          create_host_path: false
      - type: bind
        source: /volume1/docker/nodedc-gitea/socket
        target: /run/gitea
        bind:
          create_host_path: false
    secrets:
      - gitea_secret_key
      - gitea_internal_token
    tmpfs:
      - /tmp:rw,noexec,nosuid,nodev,size=256m

secrets:
  gitea_secret_key:
    file: /volume1/docker/nodedc-gitea/secrets/secret-key
  gitea_internal_token:
    file: /volume1/docker/nodedc-gitea/secrets/internal-token