version: '3.9'

services:
    gitlab:
        image: gitlab/gitlab-ce
        hostname: ${GITLAB_HOSTNAME}
        restart: unless-stopped
        environment:
            GITLAB_OMNIBUS_CONFIG: |
                external_url '${GITLAB_URL}'
                nginx['ssl_certificate'] = "/etc/gitlab/ssl/fullchain.pem"
                nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/privkey.pem"
                registry_external_url '${GITLAB_REGISTRY_URL}'
                registry_nginx['ssl_certificate'] = "/etc/gitlab/ssl/fullchain.pem"
                registry_nginx['ssl_certificate_key'] = "/etc/gitlab/ssl/privkey.pem"
                registry_nginx['listen_port'] = 81
                registry_nginx['listen_https'] = true
                gitlab_rails['registry_path'] = "/etc/registry"
                letsencrypt['enable'] = false
                web_server['username'] = 'git'
                prometheus['enable'] = false
                grafana['enable'] = false
                gitlab_rails['smtp_enable'] = true
                gitlab_rails['smtp_address'] = "${SMTP_HOST}"
                gitlab_rails['smtp_port'] = ${SMTP_PORT}
                gitlab_rails['smtp_user_name'] = "${SMTP_USER}"
                gitlab_rails['gitlab_email_from'] = '${SMTP_FROM}'
                gitlab_rails['smtp_password'] = "${SMTP_PASSWORD}"
                gitlab_rails['smtp_domain'] = "${SMTP_HOST}"
                gitlab_rails['smtp_authentication'] = "login"
                gitlab_rails['smtp_enable_starttls_auto'] = true
                gitlab_rails['smtp_tls'] = false
                gitlab_rails['smtp_openssl_verify_mode'] = 'peer'
        volumes:
            - '/home/nick/configs/gitlab/config:/etc/gitlab'
            - '/home/nick/configs/gitlab/logs:/var/log/gitlab'
            - '/home/nick/configs/gitlab/data:/var/opt/gitlab'
            - '/home/nick/configs/gitlab/registry:/etc/registry'
            - '/home/nick/configs/routing/nginx/certs/letsencrypt/live/karaolidis.com/fullchain.pem:/etc/gitlab/ssl/fullchain.pem:ro'
            - '/home/nick/configs/routing/nginx/certs/letsencrypt/live/karaolidis.com/privkey.pem:/etc/gitlab/ssl/privkey.pem:ro'
        networks:
            - default
            - routing
        shm_size: '256m'

    runner:
        image: gitlab/gitlab-runner
        restart: unless-stopped
        volumes:
            - '/home/nick/configs/gitlab/runner:/etc/gitlab-runner'
            - '/var/run/docker.sock:/var/run/docker.sock'

networks:
    routing:
        external: true
        name: routing