services:
  traefik:
    image: traefik@sha256:8516638b18e67e999d293e4ff0e5baf7807674cd4bdd3d36d448497bcbf0a174
    restart: unless-stopped
    command:
      - --configFile=/etc/traefik/traefik.yml
    volumes:
      - /volume1/xtao-data/traefik/traefik.yml:/etc/traefik/traefik.yml:ro
      - /volume1/xtao-data/traefik/dynamic:/etc/traefik/dynamic:ro
      - /volume1/xtao-data/traefik/certs:/certs:ro
    networks:
      xtao_edge_macvlan:
        ipv4_address: 192.168.1.202
      xtao_edge_internal: {}

  uptime-kuma:
    image: louislam/uptime-kuma@sha256:b4c3a4d186b4612b3a7bbb39c56a634626276615c21871c837a86e4a43d8e047
    restart: unless-stopped
    volumes:
      - /volume1/xtao-data/uptime-kuma:/app/data
    networks:
      - xtao_edge_internal

  forgejo-db:
    image: postgres@sha256:f5aa7cac1dc299a77761ada5a5cf9c6ef4064bc85c89fed49c587dd2381d6f05
    restart: unless-stopped
    env_file:
      - /volume1/xtao-data/secrets/forgejo-postgres.env
    environment:
      POSTGRES_USER: forgejo
      POSTGRES_DB: forgejo
    volumes:
      - /volume1/xtao-data/postgres/forgejo:/var/lib/postgresql/data
    networks:
      - xtao_edge_internal

  forgejo:
    image: codeberg.org/forgejo/forgejo@sha256:0f07dbf37c585fd0f90b5bb27d66540fd0cf197f5ee79b493be9ee18787797f9
    restart: unless-stopped
    depends_on:
      - forgejo-db
    env_file:
      - /volume1/xtao-data/secrets/forgejo-postgres.env
    environment:
      USER_UID: "1028"
      USER_GID: "100"
      FORGEJO__server__DOMAIN: git.xtao.net
      FORGEJO__server__ROOT_URL: https://git.xtao.net/
      FORGEJO__server__HTTP_PORT: "3000"
      FORGEJO__service__DISABLE_REGISTRATION: "true"
      FORGEJO__security__INSTALL_LOCK: "true"
      FORGEJO__database__DB_TYPE: postgres
      FORGEJO__database__HOST: forgejo-db:5432
      FORGEJO__database__NAME: forgejo
      FORGEJO__database__USER: forgejo
    volumes:
      - /volume1/xtao-data/forgejo:/data
    networks:
      - xtao_edge_internal

  registry:
    image: registry@sha256:46faa9a1ae6813194b53921a370f2f4f8c5e1aae228a89bceafef5847a6a3278
    restart: unless-stopped
    volumes:
      - /volume1/xtao-data/registry:/var/lib/registry
    networks:
      - xtao_edge_internal

networks:
  xtao_edge_internal:
    name: xtao_edge_internal
    driver: bridge
  xtao_edge_macvlan:
    name: xtao_edge_macvlan
    driver: macvlan
    driver_opts:
      parent: ovs_eth0
    ipam:
      config:
        - subnet: 192.168.1.0/24
          gateway: 192.168.1.1
          ip_range: 192.168.1.202/32