1 files changed, 51 insertions, 0 deletions
diff --git a/services/forge/compose.yaml b/services/forge/compose.yaml
new file mode 100644
index 0000000..ea625b8
--- /dev/null
+++ b/services/forge/compose.yaml
@@ -0,0 +1,51 @@
+networks:
+  proxy:
+    external: true
+
+services:
+  soft-serve:
+    image: charmcli/soft-serve:latest
+    container_name: soft-serve
+    volumes:
+      - /opt/soft-serve:/soft-serve
+    ports:
+      - 22:23231
+    environment:
+      SOFT_SERVE_INITIAL_ADMIN_KEYS: "ssh-rsa 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"
+    restart: unless-stopped
+
+  cgit-private:
+    image: oems/cgit
+    container_name: cgit-private
+    restart: unless-stopped
+    volumes:
+      - /opt/soft-serve/repos:/mnt/git
+    networks:
+      - proxy
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.cgit-private.service=cgit-private
+      - traefik.http.services.cgit-private.loadbalancer.server.port=80
+      - traefik.http.routers.cgit-private.rule=Host(`git.c41ro.win`)
+      - traefik.http.routers.cgit-private.entrypoints=websecure
+      - traefik.http.routers.cgit-private.tls=true
+      - traefik.http.routers.cgit-private.tls.certresolver=le
+      - traefik.http.routers.cgit-private.middlewares=oidc-auth@file
+
+  cgit-pub:
+    image: oems/cgit
+    container_name: cgit-pub
+    restart: unless-stopped
+    volumes:
+      - /opt/soft-serve/repos/public:/mnt/git
+    networks:
+      - proxy
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.cgit-pub.service=cgit-pub
+      - traefik.http.services.cgit-pub.loadbalancer.server.port=80
+      - traefik.http.routers.cgit-pub.rule=Host(`pub.git.c41ro.win`)
+      - traefik.http.routers.cgit-pub.entrypoints=websecure
+      - traefik.http.routers.cgit-pub.tls=true
+      - traefik.http.routers.cgit-pub.tls.certresolver=le
+