# Git-over-ssh stays on the host sshd port 22 via passthrough
services:
  db:
    image: mariadb:11.8
    restart: unless-stopped
    environment:
      MARIADB_DATABASE: gitea
      MARIADB_USER: gitea
      MARIADB_PASSWORD: "{{ gitea_db_password }}"
      MARIADB_RANDOM_ROOT_PASSWORD: 1
    volumes:
      - db:/var/lib/mysql
    healthcheck:
      test: ["CMD", "healthcheck.sh", "--connect", "--innodb_initialized"]
      interval: 10s
      retries: 12
  gitea:
    image: docker.gitea.com/gitea:1.26.4
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy
    environment:
      # Match the host "gitea" passthrough user (tasks/gitea.yml)
      # for access to authorized_keys
      USER_UID: 2222
      USER_GID: 2222
      # Must match RUN_USER in data/gitea/conf/app.ini.
      USER: gitea
    ports:
      - "127.0.0.1:8083:3000"
      - "127.0.0.1:2222:22"
    volumes:
      - ./data:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro

volumes:
  db: