version: '3.8'

services:

  gitea:
    image: gitea/gitea:latest
    ports:
      - "3000:3000"    # Optional external port access
      - "22:22"        # SSH (optional, remap if needed)
    environment:
      - USER_UID=1001
      - USER_GID=1001
    volumes:
      - /mnt/vfs_local/gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    networks:
      - gitea-net
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure

  nginx:
    image: nginx:latest
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /mnt/vfs_local/nginx/gitea.conf:/etc/nginx/conf.d/gitea.conf:ro
      - /mnt/vfs_local/ssl:/etc/letsencrypt:ro  # optional, if using Let's Encrypt
    depends_on:
      - gitea
    networks:
      - gitea-net
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure

networks:
  gitea-net:
    driver: overlay