{ config, pkgs, ... }:

let
  container_name = "gitea";
  compose-dir = "docker-compose/gitea";
  config-dir = "/mnt/config-storage/docker-data/gitea";
in

{
  config = {
    environment.etc."${compose-dir}/compose.yaml".text =
      /*DB_NAM
      yaml
      */
      ''
        services:
          gitea:
            image: gitea/gitea:latest
            container_name: gitea
            networks:
              gitea_frontend:
              gitea_backend:
            volumes:
              - ${config_dir}/data:/data
              - /etc/timezone:/etc/timezone:ro
              - /etc/localtime:/etc/localtime:ro
            environment:
              - USER_UID=1000
              - USER_GID=1000
              - GITEA__database__DB_TYPE=postgres
              - GITEA__database__HOST=$POSTGRES_HOST:$POSTGRES_PORT
              - GITEA__database__NAME=$DB_NAME
              - GITEA__database__USER=$DB_USERNAME
              - GITEA__database__PASSWD=$DB_PASSWORD
              - GITEA__server__SSH_PORT=2424
              - GITEA__server__ROOT_URL=gitea.$DOMAIN_NAME
            labels:
              - traefik.enable=true
              - traefik.http.services.gitea.loadbalancer.server.port=3000
              - traefik.http.services.gitea.loadbalancer.server.scheme=http
              - traefik.http.routers.gitea-https.entrypoints=websecure
              - traefik.http.routers.gitea-https.rule=Host(`gitea.$DOMAIN_NAME`)
              - traefik.http.routers.gitea-https.tls=true
              - traefik.http.routers.gitea-https.tls.certresolver=cloudflare
            depends_on:
              - gitea-database
            restart: unless-stopped

          gitea-database:
            image: docker.io/library/postgres:17.5
            container_name: gitea-database
            environment:
              - POSTGRES_USER=$DB_USERNAME
              - POSTGRES_PASSWORD=$DB_PASSWORD
              - POSTGRES_DB=$DB_NAME
            networks:
              gitea_backend:
            volumes:
              - gitea-database:/var/lib/postgresql/data
            restart: unless-stopped

        volumes:
          gitea-database:

        networks:
          gitea_frontend:
            external: true
          gitea_backend:
            external: true
      '';

    systemd.services.gitea = {
      description = "Docker container : ${container_name}";
      after = [ "network.target" "docker.service" "docker.socket" "traefik.service" ];
      requires = [ "docker.service" ];
      wantedBy = ["multi-user.target"];
      path = [ pkgs.docker ];

      serviceConfig = {
        Type = "exec";
        # Pull the latest image before running
        ExecStartPre = "${pkgs.docker}/bin/docker compose -f /etc/${compose-dir}/compose.yaml pull";
        # Bring the service up
        ExecStart = "${pkgs.docker}/bin/docker compose -f /etc/${compose-dir}/compose.yaml up --remove-orphans";
        # Take it down gracefully
        ExecStop = "${pkgs.docker}/bin/docker compose -f /etc/${compose-dir}/compose.yaml down";

        Restart = "on-failure";
      };
    };
  };
}