Traefik and Frigate updated to new module format. Frigate needs some more testing (hardening, devices).

modules/services/gitea.nix

@@ -1,8 +1,10 @@
 { config, pkgs, ... }:
 
 let
-  container_name = "gitea";
-  compose_file = "podman/gitea/compose.yaml";
+  containerName = "gitea";
+  composeFile = "podman/gitea/compose.yaml";
+  configDir = "/mnt/config/gitea";
+  dataDir = "gitea_data";
 in
 
 {
@@ -13,18 +15,20 @@ in
       */
       ''
         services:
-          gitea:
-            image: docker.io/gitea/gitea:latest
-            container_name: gitea
+          gitea-server:
+            image: docker.gitea.com/gitea:latest-rootless
+            container_name: gitea-server
+            hostname: gitea-server
             networks:
               gitea_frontend:
               gitea_backend:
+            ports:
+              - "3000:3000/tcp" #http
             volumes:
-              - gitea_data:/data
+              - gitea_data:/var/lib/gitea
+              - ${configDir}:/etc/gitea
               - /etc/localtime:/etc/localtime:ro
             environment:
-              - USER_UID=1000
-              - USER_GID=1000
               - GITEA__database__DB_TYPE=postgres
               - GITEA__database__HOST=$POSTGRES_HOST:$POSTGRES_PORT
               - GITEA__database__NAME=$DB_NAME
@@ -32,30 +36,22 @@ in
               - GITEA__database__PASSWD=$DB_PASSWORD
               - GITEA__server__SSH_PORT=2424
               - GITEA__server__ROOT_URL=gitea.$DOMAIN_NAME
-            labels:
-              - traefik.enable=true
-              - traefik.docker.network=gitea_frontend
-              - traefik.http.services.gitea.loadbalancer.server.port=3000
-              - traefik.http.services.gitea.loadbalancer.server.scheme=http
-              - traefik.http.routers.gitea-https.entrypoints=websecure
-              - traefik.http.routers.gitea-https.rule=Host(`gitea.$DOMAIN_NAME`)
-              - traefik.http.routers.gitea-https.tls=true
-              - traefik.http.routers.gitea-https.tls.certresolver=cloudflare
             depends_on:
               - gitea-database
             restart: unless-stopped
 
           gitea-database:
-            image: docker.io/library/postgres:17.5
+            image: docker.io/library/postgres:14
             container_name: gitea-database
-            environment:
-              - POSTGRES_USER=$DB_USERNAME
-              - POSTGRES_PASSWORD=$DB_PASSWORD
-              - POSTGRES_DB=$DB_NAME
+            hostname: gitea-database
             networks:
               gitea_backend:
             volumes:
               - gitea_database:/var/lib/postgresql/data
+            environment:
+              - POSTGRES_USER=$DB_USERNAME
+              - POSTGRES_PASSWORD=$DB_PASSWORD
+              - POSTGRES_DB=$DB_NAME
             restart: unless-stopped
 
         volumes:
@@ -64,9 +60,19 @@ in
 
         networks:
           gitea_frontend:
-            external: true
+            name: gitea_frontend
+            driver: bridge
+            ipam:
+              config:
+                - subnet: "10.89.3.0/24"
+                  gateway: "10.89.3.254"
           gitea_backend:
-            external: true
+            name: gitea_backend
+            driver: bridge
+            ipam:
+              config:
+                - subnet: "10.89.4.0/24"
+                  gateway: "10.89.4.254"
       '';
 
     systemd.services."${container_name}" = {