step implementing maintanance logic

2026-06-27 15:20:23 +02:00
parent 1da5c4fefc
commit 2bb5125254
14 changed files with 549 additions and 31 deletions
@@ -0,0 +1,46 @@
+version: '3.8'
+
+services:
+  gitea-server:
+    image: gitea/gitea:latest
+    container_name: gitea
+    restart: unless-stopped
+    environment:
+      - USER_UID=1000
+      - USER_GID=1000
+      # Database connection
+      - GITEA__database__DB_TYPE=postgres
+      - GITEA__database__HOST=gitea-db:5432
+      - GITEA__database__NAME=gitea
+      - GITEA__database__USER=gitea
+      - GITEA__database__PASSWD=###SomePassword###
+      # Web / Domain settings
+      - GITEA__server__DOMAIN=git.nerdyssey.de
+      - GITEA__server__ROOT_URL=https://git.nerdyssey.de/
+      - GITEA__server__SSH_DOMAIN=git.nerdyssey.de
+      - GITEA__server__SSH_PORT=2222
+      # Security
+      - GITEA__service__DISABLE_REGISTRATION=true
+      - GITEA__service__REQUIRE_SIGNIN_VIEW=false
+    volumes:
+      - ./data:/data
+    ports:
+      - "2222:22" # This allows Git over SSH
+    depends_on:
+      - gitea-db
+
+  gitea-db:
+    image: postgres:15-alpine
+    container_name: gitea-db
+    restart: unless-stopped
+    environment:
+      - POSTGRES_USER=gitea
+      - POSTGRES_PASSWORD=###SomePassword###
+      - POSTGRES_DB=gitea
+    volumes:
+      - ./postgres:/var/lib/postgresql/data
+
+networks:
+  default:
+    name: proxy_net
+    external: true
@@ -0,0 +1,18 @@
+services:
+  mosquitto:
+    image: eclipse-mosquitto:latest
+    container_name: mosquitto
+    restart: unless-stopped
+    # Power are managed via private subnet "proxy_net"
+    # ports:
+    #  - "1883:1883"
+    #  - "9001:9001"
+    volumes:
+      - ./config:/mosquitto/config
+      - ./data:/mosquitto/data
+      - ./log:/mosquitto/log
+
+networks:
+  default:
+    name: proxy_net
+    external: true
@@ -0,0 +1,20 @@
+version: '3.8'
+
+services:
+  nginx-proxy-manager:
+    image: 'jc21/nginx-proxy-manager:latest'
+    container_name: nginx-proxy-manager
+    restart: unless-stopped
+    ports:
+      - '80:80'      # Public HTTP Port (Required for Certbot challenges)
+      - '443:443'    # Public HTTPS Port
+      - '81:81'      # Admin Web Dashboard
+      - '8883:8883'    # Added for Secure MQTT (MQTTS)
+    volumes:
+      - ./data:/data
+      - ./letsencrypt:/etc/letsencrypt
+
+networks:
+  default:
+    name: proxy_net
+    external: true