version: "3"

networks:
  proxy:
    external: true

services:
  server:
    image: gitea/gitea:latest
    container_name: gitea
    environment:
      - USER_UID=112
      - USER_GID=121
      - SSH_DOMAIN=gitea.DOMINIO
      - APP_NAME=Vergara's Git
      - SSH_PORT=2222
      - SSH_LISTEN_PORT=2222
    restart: always
    networks:
      - proxy
    volumes:
      - ./gitea:/data
      - /home/git/.ssh/:/data/git/.ssh
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "127.0.0.1:3000:3000"
      - "127.0.0.1:2222:22"
    labels:
      traefik.enable: true
      traefik.http.middlewares.redirect.redirectscheme.scheme: https
      traefik.http.routers.gitea-http.entrypoints: websecure
      traefik.http.routers.gitea-http.middlewares: redirect
      traefik.http.routers.gitea-http.rule: 'Host(`gitea.DOMINIO`)'
      traefik.http.routers.gitea.entrypoints: websecure
      traefik.http.routers.gitea.rule: 'Host(`gitea.DOMINIO`)'
      traefik.http.routers.gitea.tls: 'true'
      traefik.http.routers.gitea.tls.certresolver: lets-encr
      traefik.http.services.gitea.loadbalancer.server.port: 3000
      traefik.docker.network: proxy
       # SSH
      traefik.tcp.routers.gitea-ssh.rule: HostSNI(`*`)
      traefik.tcp.routers.gitea-ssh.entrypoints: ssh
      traefik.tcp.routers.gitea-ssh.service: gitea-ssh-svc
      traefik.tcp.services.gitea-ssh-svc.loadbalancer.server.port: 2222