Michael Schiemer
9289344379
Some checks failed
🚀 Build & Deploy Image / Determine Build Necessity (push) Failing after 1m12s
🚀 Build & Deploy Image / Build Runtime Base Image (push) Has been skipped
🚀 Build & Deploy Image / Build Docker Image (push) Has been skipped
🚀 Build & Deploy Image / Run Tests & Quality Checks (push) Has been skipped
🚀 Build & Deploy Image / Auto-deploy to Staging (push) Has been skipped
🚀 Build & Deploy Image / Auto-deploy to Production (push) Has been skipped
🧊 Warm Docker Build Cache / Refresh Buildx Caches (push) Has been cancelled
Security Vulnerability Scan / Check for Dependency Changes (push) Successful in 25s
System Maintenance / Run Ansible System Maintenance (push) Successful in 1m8s
📊 Monitor Workflow Performance / Monitor Workflow Performance (push) Failing after 35s
Security Vulnerability Scan / Composer Security Audit (push) Failing after 27s
- Move all Gitea configuration from docker-compose.yml environment variables to app.ini - Enable Redis cache with proper connection string format (redis://) - Fix Redis password to use Gitea Redis instance password (gitea_redis_password) instead of application Redis stack password - Add database connection pool settings to prevent timeout errors - Configure Redis for cache, session, and queue using app.ini - Update Ansible task to use correct Redis password for Gitea Redis instance Benefits: - Cache now works correctly (environment variables had a bug in Gitea 1.25) - All settings are versioned in Git - Better maintainability and reliability - Configuration follows Gitea documentation recommendations
114 lines
3.3 KiB
YAML
114 lines
3.3 KiB
YAML
services:
|
|
gitea:
|
|
image: gitea/gitea:1.25
|
|
container_name: gitea
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- postgres
|
|
- redis
|
|
networks:
|
|
- traefik-public
|
|
- gitea-internal
|
|
environment:
|
|
# Container-specific settings only
|
|
- TZ=Europe/Berlin
|
|
- USER_UID=1000
|
|
- USER_GID=1000
|
|
# Postgres password for postgres container (not for Gitea config)
|
|
- POSTGRES_PASSWORD=gitea_password
|
|
# All Gitea configuration is now in app.ini (deployed via Ansible)
|
|
# Environment variables removed for better reliability and maintainability
|
|
# Migration benefits:
|
|
# - Cache now works correctly (environment variables had a bug in Gitea 1.25)
|
|
# - All settings are versioned in Git
|
|
# - Better documentation and maintainability
|
|
volumes:
|
|
- gitea-data:/data
|
|
- /etc/timezone:/etc/timezone:ro
|
|
- /etc/localtime:/etc/localtime:ro
|
|
labels:
|
|
- "traefik.enable=true"
|
|
|
|
# HTTP Router configuration
|
|
- "traefik.http.routers.gitea.rule=Host(`git.michaelschiemer.de`)"
|
|
- "traefik.http.routers.gitea.entrypoints=websecure"
|
|
- "traefik.http.routers.gitea.tls=true"
|
|
- "traefik.http.routers.gitea.tls.certresolver=letsencrypt"
|
|
- "traefik.http.routers.gitea.priority=100"
|
|
# Service configuration (Docker provider uses port, not url)
|
|
- "traefik.http.services.gitea.loadbalancer.server.port=3000"
|
|
# Middleware chain (removed temporarily to test if it causes issues)
|
|
# - "traefik.http.routers.gitea.middlewares=security-headers-global@file,gzip-compression@file"
|
|
# Explicitly reference the service (like MinIO does)
|
|
- "traefik.http.routers.gitea.service=gitea"
|
|
healthcheck:
|
|
test: ["CMD", "curl", "-f", "http://localhost:3000/api/healthz"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 30s
|
|
|
|
postgres:
|
|
image: postgres:16-alpine
|
|
container_name: gitea-postgres
|
|
restart: unless-stopped
|
|
networks:
|
|
- gitea-internal
|
|
environment:
|
|
- TZ=Europe/Berlin
|
|
- POSTGRES_DB=gitea
|
|
- POSTGRES_USER=gitea
|
|
- POSTGRES_PASSWORD=gitea_password
|
|
command: >
|
|
postgres
|
|
-c max_connections=300
|
|
-c authentication_timeout=180
|
|
-c statement_timeout=30000
|
|
-c idle_in_transaction_session_timeout=30000
|
|
volumes:
|
|
- postgres-data:/var/lib/postgresql/data
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-gitea} -d ${POSTGRES_DB:-gitea}"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 30s
|
|
|
|
redis:
|
|
image: redis:7-alpine
|
|
container_name: gitea-redis
|
|
restart: unless-stopped
|
|
networks:
|
|
- gitea-internal
|
|
environment:
|
|
- TZ=Europe/Berlin
|
|
command: >
|
|
redis-server
|
|
--requirepass ${REDIS_PASSWORD:-gitea_redis_password}
|
|
--appendonly yes
|
|
--maxmemory 512mb
|
|
--maxmemory-policy allkeys-lru
|
|
volumes:
|
|
- redis-data:/data
|
|
healthcheck:
|
|
test: ["CMD", "redis-cli", "--raw", "incr", "ping"]
|
|
interval: 30s
|
|
timeout: 10s
|
|
retries: 3
|
|
start_period: 10s
|
|
|
|
volumes:
|
|
gitea-data:
|
|
name: gitea-data
|
|
postgres-data:
|
|
name: gitea-postgres-data
|
|
redis-data:
|
|
name: gitea-redis-data
|
|
|
|
networks:
|
|
traefik-public:
|
|
external: true
|
|
gitea-internal:
|
|
name: gitea-internal
|
|
driver: bridge
|