version: "3"

networks:
  traefik:
    external: true

services:
  server:
    image: codeberg.org/forgejo/forgejo:1.18
    container_name: forgejo
    environment:
      - USER_UID=1000
      - USER_GID=1000
    restart: always
    networks:
      - traefik
    volumes:
      - /data/forgejo:/data
      - /srv/forgejo/conf:/data/gitea/conf
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    labels:
      - traefik.http.routers.forgejo.entrypoints=websecure
      - traefik.http.routers.forgejo.rule=Host(`git.pizzapim.nl`)
      - traefik.http.routers.forgejo.tls=true
      - traefik.http.routers.forgejo.tls.certresolver=pizzapim
      - traefik.tcp.routers.forgejo-ssh.service=forgejo
      - traefik.http.services.forgejo.loadbalancer.server.port=3000

      - traefik.tcp.routers.forgejo-ssh.rule=HostSNI(`*`)
      - traefik.tcp.routers.forgejo-ssh.entrypoints=ssh
      - traefik.tcp.routers.forgejo-ssh.service=forgejo-ssh
      - traefik.tcp.services.forgejo-ssh.loadbalancer.server.port=22