Merge branch 'gitea-rework' of gitlab.com:rusty-bever/deployment into gitea-rework

stacks/gitea.yml

@@ -1,74 +1,79 @@
 version: '3'
 
 services:
-    app:
+  app:
-        # Latest contains a development version
+    # Latest contains a development version
-        image: 'gitea/gitea:1.15.8'
+    image: 'gitea/gitea:1.15.8'
+    
+    deploy:
+      mode: 'replicated'
+      replicas: 1
+      placement:
+        constraints:
+          - 'node.labels.class==gitea'
+      labels:
+      - 'traefik.enable=true'
+      - 'traefik.http.routers.gitea.rule=Host(`git.rustybever.be`)'
+      - 'traefik.http.routers.gitea.tls=true'
+      - 'traefik.http.routers.gitea.tls.certresolver=letsEncrypt'
+      - 'traefik.http.services.gitea.loadbalancer.server.port=3000'
         
-        deploy:
+    configs:
-          mode: 'replicated'
+      - source: gitea_v1
-          replicas: 1
+        target: /data/gitea/conf/app.ini
-          placement:
+    environment:
-            constraints:
+      - 'DB_TYPE=postgres'
-              - 'node.labels.class==gitea'
+      - 'DB_HOST=db:5432'
-          labels:
+      - 'DB_NAME=gitea'
-            - 'traefik.enable=true'
+      - 'DB_USER=gitea'
-            - 'traefik.http.routers.gitea.rule=Host(`git.rustybever.be`)'
+      - 'DB_PASSWD=gitea'
-            - 'traefik.http.routers.gitea.tls=true'
+      - 'LFS_START_SERVER=true'
-            - 'traefik.http.routers.gitea.tls.certresolver=letsEncrypt'
+      - 'DISABLE_REGISTRATION=true'
-            - 'traefik.http.services.gitea.loadbalancer.server.port=3000'
+      - 'GITEA__server__LFS_JWT_SECRET_FILE=/run/secrets/gitea_lfs_jwt_secret'
-                
+      - 'GITEA__security__SECRET_KEY_FILE=/run/secrets/gitea_secret_key'
-        configs:
+      - 'GITEA__security__INTERNAL_TOKEN_FILE=/run/secrets/gitea_internal_token'
-          - source: gitea_v1
+      - 'GITEA__oauth2__JWT_SECRET_FILE=/run/secrets/gitea_jwt_secret'
-            target: /data/gitea/conf/app.ini
+    networks:
-        environment:
+      - 'default'
-            - 'DB_TYPE=postgres'
+      - 'public'
-            - 'DB_HOST=db:5432'
+    ports:
-            - 'DB_NAME=gitea'
+      - '22:22'
-            - 'DB_USER=gitea'
+    volumes:
-            - 'DB_PASSWD=gitea'
+      - 'data:/data'
-            - 'LFS_START_SERVER=true'
+      - 'repos:/data/git/repositories'
-            - 'DISABLE_REGISTRATION=true'
+      - 'lfs:/data/git/lfs'
-            - 'GITEA__server__LFS_JWT_SECRET_FILE=/run/secrets/gitea_lfs_jwt_secret'
+      - '/etc/timezone:/etc/timezone:ro'
-            - 'GITEA__security__SECRET_KEY_FILE=/run/secrets/gitea_secret_key'
+      - '/etc/localtime:/etc/localtime:ro'
-            - 'GITEA__security__INTERNAL_TOKEN_FILE=/run/secrets/gitea_internal_token'
+    secrets:
-            - 'GITEA__oauth2__JWT_SECRET_FILE=/run/secrets/gitea_jwt_secret'
+      - gitea_internal_token
-        networks:
+      - gitea_jwt_secret
-            - 'default'
+      - gitea_lfs_jwt_secret
-            - 'public'
+      - gitea_secret_key
-        ports:
-            - '22:22'
-        volumes:
-            - 'data:/data'
-            - 'repos:/data/git/repositories'
-            - 'lfs:/data/git/lfs'
-            - '/etc/timezone:/etc/timezone:ro'
-            - '/etc/localtime:/etc/localtime:ro'
 
-    db:
+  db:
-        image: 'postgres:14.1-alpine'
+    image: 'postgres:14.1-alpine'
-        
+    
-        deploy:
+    deploy:
-          mode: 'replicated'
+      mode: 'replicated'
-          replicas: 1
+      replicas: 1
-          placement:
+      placement:
-            constraints:
+        constraints:
-              - 'node.labels.class==gitea'
+          - 'node.labels.class==gitea'
 
-        environment:
+    environment:
-            - 'POSTGRES_USER=gitea'
+      - 'POSTGRES_USER=gitea'
-            - 'POSTGRES_PASSWORD=gitea'
+      - 'POSTGRES_PASSWORD=gitea'
-            - 'POSTGRES_DB=gitea'
+      - 'POSTGRES_DB=gitea'
-        volumes:
+    volumes:
-            - 'db-data:/var/lib/postgresql/data'
+      - 'db-data:/var/lib/postgresql/data'
 
 configs:
   gitea_v1:
     external: true
 
 networks:
-    public:
+  public:
-        external: true
+    external: true
 
 secrets:
   gitea_internal_token: