services:
  gitea:
    image: docker.gitea.com/gitea@sha256:87a67ee09d3ae0d1df5fda5dcda3e2a1f9236a45b0a59025d6e00e46adc43bef # 1.27.3
    container_name: gitea
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - GITEA__oauth2__JWT_SECRET=${GITEA__oauth2__JWT_SECRET:?JWT required}
      - GITEA__server__LFS_JWT_SECRET=${GITEA__server__LFS_JWT_SECRET:?LFS JWT required}
      - GITEA__security__INTERNAL_TOKEN=${GITEA__security__INTERNAL_TOKEN:?Internal Token required}
    restart: always
    networks:
      - gitea_net
    volumes:
      - ./gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro

networks:
  gitea_net:
    name: gitea_net
    external: true