docker 安装gitea

version: "3"

networks:
  gitea:
    external: false
services:
  server:
    image: gitea/gitea:latest
    container_name: gitea
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - DB_TYPE=mysql
      - DB_HOST=db:3306
      - DB_NAME=gitea
      - DB_USER=gitea
      - DB_PASSWD=gitea
    restart: always
    networks:
      - gitea
    volumes:
      - ./data:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "222:22"
    depends_on:
      - db

  db:
    image: mysql:8
    restart: always
    environment:
      - MYSQL_ROOT_PASSWORD=gitea
      - MYSQL_USER=gitea
      - MYSQL_PASSWORD=gitea
      - MYSQL_DATABASE=gitea
    networks:
      - gitea
    volumes:
      - ./mysql:/var/lib/mysql
  
  nginx:
    image: nginx:latest
    container_name: nginx-web
    restart: always
    ports:
      - 80:80
      - 443:443
    networks:
      - gitea
    volumes:
      - ./nginx/cert:/etc/nginx/cert
      - ./nginx/nginx.conf:/etc/nginx/conf.d/default.conf
      - ./nginx/log:/var/log/nginx
      - /etc/localtime:/etc/localtime:ro

client_max_body_size 100m;
server {
    listen 80;
    listen 443 ssl;
    server_name git.shenglei.top;
    ssl_certificate /etc/nginx/cert/www.shenglei.top_bundle.crt;
    ssl_certificate_key /etc/nginx/cert/www.shenglei.top.key;
    ssl_session_timeout 5m;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    ssl_prefer_server_ciphers on;
    location / {
        proxy_pass http://gitea:3000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

ssl_certificate /etc/nginx/cert/www.shenglei.top_bundle.crt;
ssl_certificate_key /etc/nginx/cert/www.shenglei.top.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
ssl_prefer_server_ciphers on;

version: "3"

networks:
  tinode-net:
    external: false
services:
  server:
    image: tinode/tinode-mysql:latest
    container_name: tinode
    environment:
      - EXT_CONFIG=/tinode.conf 
    restart: always
    networks:
      - tinode-net
    volumes:
      - ./tinode.conf:/tinode.conf
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    depends_on:
      - mysql
  mysql:
    image: mysql:5.7
    restart: always
    environment:
      - MYSQL_ALLOW_EMPTY_PASSWORD=yes
    networks:
      - tinode-net
    volumes:
      - ./mysql:/var/lib/mysql