version: "3.9"

volumes:
  gitea:
    name: gitea
  kimai:
    name: kimai
  kimai-var:
    name: kimai-var

networks:
  proxy:
    external: true
  internal:
    external: true

services:
  gitea:
    image: gitea/gitea
    container_name: gitea
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - GITEA__database__DB_TYPE=postgres
      - GITEA__database__HOST=psql14:5432
      - GITEA__database__NAME=gitea
      - GITEA__database__USER=gitea
      - GITEA__database__PASSWD=sadlkf0234lsdf
    restart: unless-stopped
    volumes:
      - gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    depends_on:
      - psql14
    networks:
      - internal
      - proxy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.git.entrypoints=web"
      - "traefik.http.routers.git.rule=Host(`cs-git.ddnss.de`)"
      - "traefik.http.routers.git.middlewares=git"
      - "traefik.http.middlewares.git.redirectscheme.scheme=https"
      - "traefik.http.routers.git-secure.entrypoints=websecure"
      - "traefik.http.routers.git-secure.rule=Host(`cs-git.ddnss.de`)"
      - "traefik.http.routers.git-secure.service=git-secure"
      - "traefik.http.routers.git-secure.tls=true"
      - "traefik.http.routers.git-secure.tls.certresolver=myresolver"
      - "traefik.http.routers.git-secure.tls.domains[0].main=cs-git.ddnss.de"
      - "traefik.http.services.git-secure.loadbalancer.server.port=3000"

  nginx-kimai:
    image: nginx:alpine
    container_name: nginx-kimai
    restart: unless-stopped
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.kimai.entrypoints=web"
      - "traefik.http.routers.kimai.rule=Host(`kimai.lan`)"
      - "traefik.http.services.kimai.loadbalancer.server.port=80"
    depends_on:
      - kimai
    networks:
      - proxy
      - internal
    volumes:
      - kimai:/opt/kimai/public:ro
      - ${PWD}/kimai.conf:/etc/nginx/conf.d/default.conf

  kimai:
    image: kimai/kimai2
    container_name: kimai
    restart: unless-stopped
    environment:
      - ADMINMAIL=christiansteinle@arcor.de
      - ADMINPASS=ZovJdPamHwSNCGTcOPDb
      - DATABASE_URL=mysql://kimai:xXW5dnQoMpAmdXrQgUgU@mysql8/kimai
      - TRUSTED_HOSTS=kimai.lan
      - APP_SECRET=gwot394*Gt
    networks:
      - internal
    volumes:
      - kimai:/opt/kimai/public
      - kimai-var:/opt/kimai/var