Hedi Kalboussi
1e90a85359
- 6 docs racine (README, HANDOVER, ARCHITECTURE, DECISIONS, INSTALL, OPERATIONS) - 9 docs thématiques dans docs/ - 10 templates docker-compose dans configs/ - 7 scripts Python/Shell d'import Furious vers Zitadel - 2 matrices RBAC Etat infra au 5 juin 2026 : - 88 users Furious importes dans Zitadel - 8 roles RBAC crees et attribues - Intranet filtre les cartes selon role (Approche A) - 7 outils SSO operationnels
49 lines
1.5 KiB
Plaintext
49 lines
1.5 KiB
Plaintext
services:
|
|
gitea:
|
|
image: gitea/gitea:1.22
|
|
container_name: gitea
|
|
restart: unless-stopped
|
|
environment:
|
|
USER_UID: 1000
|
|
USER_GID: 1000
|
|
# Base de données
|
|
GITEA__database__DB_TYPE: postgres
|
|
GITEA__database__HOST: postgres:5432
|
|
GITEA__database__NAME: gitea
|
|
GITEA__database__USER: gitea
|
|
GITEA__database__PASSWD: ${GITEA_DB_PASSWORD}
|
|
# Serveur
|
|
GITEA__server__DOMAIN: git.seizeconsulting.com
|
|
GITEA__server__ROOT_URL: https://git.seizeconsulting.com/
|
|
GITEA__server__SSH_DOMAIN: git.seizeconsulting.com
|
|
# OIDC Auto-registration (rempli après config SSO)
|
|
GITEA__oauth2_client__ENABLE_AUTO_REGISTRATION: "true"
|
|
GITEA__oauth2_client__USERNAME: preferred_username
|
|
GITEA__oauth2_client__ACCOUNT_LINKING: auto
|
|
# Désactiver le register manuel (SSO uniquement)
|
|
GITEA__service__DISABLE_REGISTRATION: "true"
|
|
GITEA__service__SHOW_REGISTRATION_BUTTON: "false"
|
|
volumes:
|
|
- ./data:/data
|
|
- /etc/timezone:/etc/timezone:ro
|
|
- /etc/localtime:/etc/localtime:ro
|
|
ports:
|
|
- "22:22" # SSH Git
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.http.routers.gitea.rule=Host(`git.seizeconsulting.com`)"
|
|
- "traefik.http.routers.gitea.entrypoints=websecure"
|
|
- "traefik.http.routers.gitea.tls.certresolver=letsencrypt"
|
|
- "traefik.http.services.gitea.loadbalancer.server.port=3000"
|
|
networks:
|
|
- web
|
|
- backend
|
|
depends_on:
|
|
- postgres
|
|
|
|
networks:
|
|
web:
|
|
external: true
|
|
backend:
|
|
external: true
|