version: "3.8"

services:
  tailscale:
    image: tailscale/tailscale:latest
    hostname: tailscale-gitea
    environment:
      - TS_AUTHKEY=tskey-auth-kNm64Dbcts11CNTRL-4eLQjm2pQYCLdy285gNaYCFDF1KTjP71
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_USERSPACE=false
    volumes:
      - tailscale-state:/var/lib/tailscale
    devices:
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - net_admin
      - net_raw
    restart: unless-stopped

  nginx:
    image: nginx:latest
    depends_on:
      - tailscale
    network_mode: service:tailscale
    restart: unless-stopped
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
    expose:
      - "80"

  gitea:
    image: gitea/gitea:latest
    depends_on:
      - tailscale
    network_mode: service:tailscale
    container_name: gitea
    restart: unless-stopped
    volumes:
      - gitea-data:/data
      - tailscale-state:/var/lib/tailscale
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - GITEA__server__ROOT_URL=http://gitea/
      - GITEA__server__HTTP_PORT=3000
      - GITEA__server__DOMAIN=gitea
      - GITEA__server__SSH_DOMAIN=gitea
      - TAILSCALE_AUTHKEY=
      - TAILSCALE_HOSTNAME=gitea

volumes:
  gitea-data:
    driver: local
  tailscale-state:
    driver: local