specify stable versions of images

scripts/down

@@ -4,4 +4,5 @@ podman compose --env-file ${ENV_FILE:-.env} \
   --file services/proxy.yaml \
   --file services/auth.yaml \
   --file services/web.yaml \
+  --file services/git.yaml \
   down --volumes

scripts/exec

@@ -4,4 +4,5 @@ podman compose --env-file ${ENV_FILE:-.env} \
   --file services/proxy.yaml \
   --file services/auth.yaml \
   --file services/web.yaml \
+  --file services/git.yaml \
   exec "$@"

scripts/run

@@ -4,4 +4,5 @@ podman compose --env-file ${ENV_FILE:-.env} \
   --file services/proxy.yaml \
   --file services/auth.yaml \
   --file services/web.yaml \
+  --file services/git.yaml \
   run "$@"

scripts/up

@@ -4,4 +4,5 @@ podman compose --env-file ${ENV_FILE:-.env} \
   --file services/proxy.yaml \
   --file services/auth.yaml \
   --file services/web.yaml \
+  --file services/git.yaml \
   up --build

services/auth.yaml

@@ -15,7 +15,7 @@ services:
 
   zitadel:
     restart: 'unless-stopped'
-    image: 'ghcr.io/zitadel/zitadel:latest'
+    image: 'ghcr.io/zitadel/zitadel:v2.24.10'
     environment:
       ZITADEL_DATABASE_COCKROACH_HOST: crdb
       ZITADEL_EXTERNALSECURE: true

services/git.yaml

@@ -0,0 +1,50 @@
+version: "3.8"
+
+secrets:
+  DB_PASSWD:
+    file: ../secrets/git/gitea/DB_PASSWD
+
+services:
+  caddy:
+    volumes:
+      - ./git/Proxyfile:/etc/caddy.d/git
+  backup:
+    volumes:
+      - ../data/git:/mnt/backup/src/git
+
+  gitea:
+    image: gitea/gitea:1.21.3-rootless
+    secrets: [ DB_PASSWD ]
+    environment:
+      GITEA__database__DB_TYPE: postgres
+      GITEA__database__HOST: "db:5432"
+      GITEA__database__NAME: gitea
+      GITEA__database__USER: gitea
+      GITEA__database__PASSWD__FILE: /run/secrets/DB_PASSWD
+      GITEA__mailer__ENABLED: true
+      GITEA__mailer__FROM: gitea
+      GITEA__mailer__MAILER_TYPE: smtp
+      GITEA__mailer__HOST: ${SMTP_HOST}
+      GITEA__mailer__IS_TLS_ENABLED: true
+      GITEA__mailer__USER: ${SMTP_USER}
+      GITEA__mailer__PASSWD: ${SMTP_PASS}
+    restart: unless-stopped
+    volumes:
+      - ../data/git/gitea/data:/data
+    ports:
+      - 3000:3000
+  db:
+    image: postgres:16.1-alpine
+    secrets: [ DB_PASSWD ]
+    environment:
+      POSTGRES_USER: gitea
+      POSTGRES_PASSWORD_FILE: /run/secrets/DB_PASSWD
+      POSTGRES_DB: gitea
+    restart: unless-stopped
+    volumes:
+      - db_data:/var/lib/postgresql/data
+    expose:
+      - 5432
+
+volumes:
+  db_data:

services/git/Proxyfile

@@ -0,0 +1,3 @@
+git.{$DOMAIN} {
+    reverse_proxy gitea:3000
+}

services/mail.yaml

@@ -18,7 +18,7 @@ services:
       - ./mail/Proxyfile:/etc/caddy.d/mail:ro
 
   maddy:
-    image: foxcpp/maddy:latest
+    image: foxcpp/maddy:0.7
     secrets: [SMTP_PASSWORD]
     restart: unless-stopped
     depends_on:
@@ -39,7 +39,7 @@ services:
       - 993:993
 
   roundcube:
-    image: roundcube/roundcubemail:1.6.x-apache
+    image: roundcube/roundcubemail:1.6.5-fpm-alpine
     environment:
       ROUNDCUBEMAIL_DEFAULT_HOST: ssl://mx.mail.${DOMAIN}
       ROUNDCUBEMAIL_DEFAULT_PORT: 993