first commit

docker-compose.yml

@@ -0,0 +1,64 @@
+---
+networks:
+  devops:
+    name: devops
+    external: true
+
+services:
+  gitea:
+    image: gitea/gitea:1.24.5
+    container_name: gitea
+    environment:
+      - USER_UID=1000
+      - USER_GID=1000
+    restart: always
+    networks:
+      - devops
+    volumes:
+      - ./gitea:/data
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+      - /home/git/.ssh/:/data/git/.ssh
+    ports:
+      - "8418:8418"
+      - "222:22"
+  node_exporter:
+    image: quay.io/prometheus/node-exporter:latest
+    container_name: node_exporter
+    network_mode: host
+    pid: host
+    restart: unless-stopped
+    command:
+      - "--path.procfs=/host/proc"
+      - "--path.sysfs=/host/sys"
+      - "--path.rootfs=/host"
+      - "--collector.filesystem.ignored-mount-points=^/(sys|proc|dev)($$|/)"
+    volumes:
+      - "/proc:/host/proc:ro"
+      - "/sys:/host/sys:ro"
+      - "/:/host:ro,rslave"
+  https_portal:
+    container_name: https_portal
+    image: "steveltn/https-portal:1.23.0"
+    restart: unless-stopped
+    user: "root"
+    networks:
+      - devops # internal network
+    ports:
+      - "80:80"
+      - "443:443"
+    environment:
+      STAGE: "production" # Use Let's Encrypt production server
+      WEBSOCKET: "true" # Enable websocket support
+      DEBUG: "true"
+      RENEW_MARGIN_DAYS: 30
+      CLIENT_MAX_BODY_SIZE: 0
+      # FORCE_RENEW: 'true'
+      DOMAINS: 'gitea.phx-erp.de -> gitea:8418'
+    volumes:
+      - ./https_portal/data:/var/lib/https-portal # ssl_certs, vhost.d, htdocs
+      - ./https_portal/log:/var/log/nginx # nginx logs
+    depends_on:
+      - gitea
+
+