version: "2"

services:
  server:
    image: gitea/gitea:latest
    environment:
     - USER_UID=1000
     - USER_GID=1000
     - VIRTUAL_HOST=your.site
     - VIRTUAL_PORT=3000
     - LETSENCRYPT_HOST=your.site
     - LETSENCRYPT_EMAIL=actual@contact.email
    restart: always
    volumes:
      - ./gitea:/data
    # We expose 3000, but realistically this shouldn't be allowed to the internet.
    ports:
      - "3000:3000"
      - "222:22"
    depends_on:
      - db
  db:
    image: disconnect24/docker-alpine-mariadb
    restart: always
    environment:
      MYSQL_RANDOM_ROOT_PASSWORD: "true"
      MYSQL_USER: gitea
      MYSQL_PASSWORD: changeme
    volumes:
      - ./mysql:/var/lib/mysql
  nginx-proxy:
    image: jwilder/nginx-proxy:alpine
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /etc/nginx/conf.d
      - /etc/nginx/vhost.d
      - /usr/share/nginx/html
      - /var/run/docker.sock:/tmp/docker.sock:ro
      - certs:/etc/nginx/certs:ro
  encryption:
    image: jrcs/letsencrypt-nginx-proxy-companion
    volumes_from:
      - nginx-proxy
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - certs:/etc/nginx/certs:rw
volumes:
  certs: