63 lines
1.5 KiB
YAML
63 lines
1.5 KiB
YAML
name: nodedc-gitea
|
|
|
|
services:
|
|
gitea:
|
|
image: docker.gitea.com/gitea:1.27.2-rootless@sha256:7de5f49ada687b8c8d2938f547cdb7634839764ba51f297457bae35cee3abd2c
|
|
platform: linux/amd64
|
|
pull_policy: never
|
|
network_mode: none
|
|
user: "1000:1000"
|
|
entrypoint:
|
|
- /usr/local/bin/gitea
|
|
command:
|
|
- web
|
|
- --config
|
|
- /etc/gitea/app.ini
|
|
restart: "no"
|
|
stop_grace_period: 30s
|
|
init: true
|
|
read_only: true
|
|
cap_drop:
|
|
- ALL
|
|
security_opt:
|
|
- no-new-privileges:true
|
|
pids_limit: 512
|
|
logging:
|
|
driver: json-file
|
|
options:
|
|
max-size: "10m"
|
|
max-file: "3"
|
|
environment:
|
|
USER: git
|
|
HOME: /data/gitea
|
|
GITEA_WORK_DIR: /data/gitea
|
|
GITEA_CUSTOM: /data/gitea
|
|
volumes:
|
|
- type: bind
|
|
source: /volume1/docker/nodedc-gitea/data
|
|
target: /data
|
|
bind:
|
|
create_host_path: false
|
|
- type: bind
|
|
source: /volume1/docker/nodedc-gitea/config
|
|
target: /etc/gitea
|
|
read_only: true
|
|
bind:
|
|
create_host_path: false
|
|
- type: bind
|
|
source: /volume1/docker/nodedc-gitea/socket
|
|
target: /run/gitea
|
|
bind:
|
|
create_host_path: false
|
|
secrets:
|
|
- gitea_secret_key
|
|
- gitea_internal_token
|
|
tmpfs:
|
|
- /tmp:rw,noexec,nosuid,nodev,size=256m
|
|
|
|
secrets:
|
|
gitea_secret_key:
|
|
file: /volume1/docker/nodedc-gitea/secrets/secret-key
|
|
gitea_internal_token:
|
|
file: /volume1/docker/nodedc-gitea/secrets/internal-token
|