services:
  gitea:
    image: gitea/gitea:1.22
    container_name: gitea
    restart: unless-stopped
    environment:
      USER_UID: 1000
      USER_GID: 1000
      # Base de données
      GITEA__database__DB_TYPE: postgres
      GITEA__database__HOST: postgres:5432
      GITEA__database__NAME: gitea
      GITEA__database__USER: gitea
      GITEA__database__PASSWD: ${GITEA_DB_PASSWORD}
      # Serveur
      GITEA__server__DOMAIN: git.seizeconsulting.com
      GITEA__server__ROOT_URL: https://git.seizeconsulting.com/
      GITEA__server__SSH_DOMAIN: git.seizeconsulting.com
      # OIDC Auto-registration (rempli après config SSO)
      GITEA__oauth2_client__ENABLE_AUTO_REGISTRATION: "true"
      GITEA__oauth2_client__USERNAME: preferred_username
      GITEA__oauth2_client__ACCOUNT_LINKING: auto
      # Désactiver le register manuel (SSO uniquement)
      GITEA__service__DISABLE_REGISTRATION: "true"
      GITEA__service__SHOW_REGISTRATION_BUTTON: "false"
    volumes:
      - ./data:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "22:22"  # SSH Git
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.gitea.rule=Host(`git.seizeconsulting.com`)"
      - "traefik.http.routers.gitea.entrypoints=websecure"
      - "traefik.http.routers.gitea.tls.certresolver=letsencrypt"
      - "traefik.http.services.gitea.loadbalancer.server.port=3000"
    networks:
      - web
      - backend
    depends_on:
      - postgres

networks:
  web:
    external: true
  backend:
    external: true