ansible-role-gitea/templates/docker-compose.yaml.j2

# ANSIBLE-MANAGED
#
# -- Diese Datei wird via Ansible verwaltet und automatisch überschrieben!
# https://azubi-gitea.int.sernet.de/mmeyer/ansible-role-gitea/src/branch/main/templates/docker-compose.yaml.j2

version: "3.8"

networks:
  gitea:
    external: false

services:
  gitea:
    image: gitea/gitea:{{ gitea_vars['version'] }}-rootless
    restart: unless-stopped
    volumes:
      - /var/lib/gitea/data:/var/lib/gitea
      - /var/lib/gitea/config:/etc/gitea
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "127.0.0.1:3000:3000"
      - "22:2222"
    user: "{{ git_user.uid }}:{{ git_user.group }}"
    env_file: ./environment.env
    networks:
      - gitea
    depends_on:
      - db

  db:
    image: "{{ gitea_vars['database']['db_type'] }}:{{ gitea_vars['database']['docker_image_tag'] }}"
    restart: unless-stopped
    environment:
      - "MYSQL_DATABASE={{ gitea_vars.database.name }}"
      - "MYSQL_USER={{ gitea_vars.database.user }}"
      - "MYSQL_PASSWORD={{ vault[inventory_hostname]['gitea']['database']['passwd'] }}"
      - "MYSQL_ROOT_PASSWORD={{ vault[inventory_hostname]['gitea']['database']['root_passwd'] }}"
    networks:
      - gitea
    volumes:
      - /var/lib/gitea/mysql:/var/lib/mysql
    cap_add:
      - SYS_NICE