Raphael Numbus
92 lines
3.0 KiB
Nix
92 lines
3.0 KiB
Nix
{ config, pkgs, ... }:
|
|
|
|
let
|
|
container_name = "gitea";
|
|
compose-dir = "docker-compose/gitea";
|
|
config-dir = "/mnt/config-storage/docker-data/gitea";
|
|
in
|
|
|
|
{
|
|
config = {
|
|
environment.etc."${compose-dir}/compose.yaml".text =
|
|
/*DB_NAM
|
|
yaml
|
|
*/
|
|
''
|
|
services:
|
|
gitea:
|
|
image: gitea/gitea:latest
|
|
container_name: gitea
|
|
networks:
|
|
gitea_frontend:
|
|
gitea_backend:
|
|
volumes:
|
|
- ${config_dir}/data:/data
|
|
- /etc/timezone:/etc/timezone:ro
|
|
- /etc/localtime:/etc/localtime:ro
|
|
environment:
|
|
- USER_UID=1000
|
|
- USER_GID=1000
|
|
- GITEA__database__DB_TYPE=postgres
|
|
- GITEA__database__HOST=$POSTGRES_HOST:$POSTGRES_PORT
|
|
- GITEA__database__NAME=$DB_NAME
|
|
- GITEA__database__USER=$DB_USERNAME
|
|
- GITEA__database__PASSWD=$DB_PASSWORD
|
|
- GITEA__server__SSH_PORT=2424
|
|
- GITEA__server__ROOT_URL=gitea.$DOMAIN_NAME
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.http.services.gitea.loadbalancer.server.port=3000
|
|
- traefik.http.services.gitea.loadbalancer.server.scheme=http
|
|
- traefik.http.routers.gitea-https.entrypoints=websecure
|
|
- traefik.http.routers.gitea-https.rule=Host(`gitea.$DOMAIN_NAME`)
|
|
- traefik.http.routers.gitea-https.tls=true
|
|
- traefik.http.routers.gitea-https.tls.certresolver=cloudflare
|
|
depends_on:
|
|
- gitea-database
|
|
restart: unless-stopped
|
|
|
|
gitea-database:
|
|
image: docker.io/library/postgres:17.5
|
|
container_name: gitea-database
|
|
environment:
|
|
- POSTGRES_USER=$DB_USERNAME
|
|
- POSTGRES_PASSWORD=$DB_PASSWORD
|
|
- POSTGRES_DB=$DB_NAME
|
|
networks:
|
|
gitea_backend:
|
|
volumes:
|
|
- gitea-database:/var/lib/postgresql/data
|
|
restart: unless-stopped
|
|
|
|
volumes:
|
|
gitea-database:
|
|
|
|
networks:
|
|
gitea_frontend:
|
|
external: true
|
|
gitea_backend:
|
|
external: true
|
|
'';
|
|
|
|
systemd.services.gitea = {
|
|
description = "Docker container : ${container_name}";
|
|
after = [ "network.target" "docker.service" "docker.socket" "traefik.service" ];
|
|
requires = [ "docker.service" ];
|
|
wantedBy = ["multi-user.target"];
|
|
path = [ pkgs.docker ];
|
|
|
|
serviceConfig = {
|
|
Type = "exec";
|
|
# Pull the latest image before running
|
|
ExecStartPre = "${pkgs.docker}/bin/docker compose -f /etc/${compose-dir}/compose.yaml pull";
|
|
# Bring the service up
|
|
ExecStart = "${pkgs.docker}/bin/docker compose -f /etc/${compose-dir}/compose.yaml up --remove-orphans";
|
|
# Take it down gracefully
|
|
ExecStop = "${pkgs.docker}/bin/docker compose -f /etc/${compose-dir}/compose.yaml down";
|
|
|
|
Restart = "on-failure";
|
|
};
|
|
};
|
|
};
|
|
} |