services:
  gitea:
    image: gitea/gitea:latest
    restart: unless-stopped
    ports:
      - "127.0.0.1:3000:3000"
      - "2222:22"               # git ssh — different port to avoid conflict
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - GITEA__database__DB_TYPE=sqlite3
      - GITEA__database__PATH=/data/gitea/gitea.db
      - GITEA__server__DOMAIN=gitea.sauravdhakal.com.np
      - GITEA__server__ROOT_URL=https://gitea.sauravdhakal.com.np
      - GITEA__server__SSH_DOMAIN=gitea.sauravdhakal.com.np
      - GITEA__server__SSH_PORT=2222
      # Allow public access but disable registration
      - GITEA__service__DISABLE_REGISTRATION=true
      # Require login to push (read is public)
      - GITEA__repository__DISABLE_HTTP_GIT=false
      - GITEA__security__INSTALL_LOCK=true
    volumes:
      - /home/saurav/hetzner_self/data/gitea:/data