docker-compose.yml

version: '3.9'
services:
  gitea:
    image: gitea/gitea:1.22.6@sha256:538658de667c5d098a274f2f63aa6ec891d88f670cdd5282cf27221ba747dda4
    hostname: gitea
    container_name: gitea__gitea
    restart: unless-stopped

    environment:
      TZ: JST
      GITEA__service__REGISTER_MANUAL_CONFIRM: "true"

    volumes:
      - type: volume
        source: gitea_data
        target: /data

      - type: bind
        source: /etc/timezone
        target: /etc/timezone
        read_only: true

      - type: bind
        source: /etc/localtime
        target: /etc/localtime
        read_only: true

    expose:
      - 3000

    networks:
      - default
      - outband

    deploy:
      resources:
        limits:
          memory: 512m

  mariadb:
    image: mariadb:11.5.2@sha256:9e7695800ab8fa72d75053fe536b090d0c9373465b32a073c73bc7940a2e8dbe

    hostname: mariadb
    container_name: gitea__mariadb
    restart: unless-stopped

    environment:
      MYSQL_ROOT_PASSWORD: gitea
      MYSQL_USER: gitea
      MYSQL_PASSWORD: gitea
      MYSQL_DATABASE: gitea

    volumes:
      - type: volume
        source: mariadb_data
        target: /var/lib/mysql

    networks:
      - default

    deploy:
      resources:
        limits:
          memory: 512m

  cloudflared:
    image: cloudflare/cloudflared:2024.9.1@sha256:0b88e00d8f93f9d18197f11506f0f6bf0d9266b5a0361c068930a3fe45b68b72
    hostname: cloudflared
    container_name: gitea__cloudflared
    restart: unless-stopped

    environment:
      TUNNEL_METRICS: 0.0.0.0:9126
      TUNNEL_LOGFILE: /dev/stdout

    command: tunnel run --token ${TUNNEL_TOKEN}

    networks:
      default:
      outband:
      prometheus__cloudflared:
        aliases:
          - gitea__cloudflared

    deploy:
      resources:
        limits:
          memory: 128m

volumes:
  gitea_data:
    name: gitea__gitea_data
  mariadb_data:
    name: gitea__mariadb_data

networks:
  default:
    name: gitea__default
    internal: true

  outband:
    name: gitea__outband

  prometheus__cloudflared:
    name: prometheus__cloudflared 
    external: true