services:
  gitea:
    image: gitea/gitea:latest
    container_name: gitea
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TZ}
      - GITEA__database__DB_TYPE=postgres
      - GITEA__database__HOST=gitea-db
      - GITEA__database__PORT=5432
      - GITEA__database__NAME=${POSTGRES_DB}
      - GITEA__database__USER=${POSTGRES_USER}
      - GITEA__database__PASSWD=${POSTGRES_PASSWORD}
      - ROOT_URL=${GITEA_ROOT_URL}
      - DOMAIN=${GITEA_DOMAIN}
      - GITEA__migrations__ALLOW_LOCALNETWORKS=true
    restart: always
    volumes:
      - /path/to/gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "${HTTP_PORT}:3000"
      - "${SSH_PORT}:22"
    depends_on:
      - gitea-db
    security_opt:
      - no-new-privileges:true
    networks:
      - gitea-net

  gitea-db:
    image: postgres:latest
    container_name: gitea-db
    restart: always
    environment:
      - POSTGRES_USER=${POSTGRES_USER}
      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
      - POSTGRES_DB=${POSTGRES_DB}
    volumes:
      - /path/to/gitea/postgres:/var/lib/postgresql
    networks:
      - gitea-net

networks:
  gitea-net:
    external: true