networks:
  proxy:
    external: true

services:
  soft-serve:
    image: charmcli/soft-serve:latest
    container_name: soft-serve
    volumes:
      - /opt/soft-serve:/soft-serve
    ports:
      - 22:23231
    environment:
      SOFT_SERVE_INITIAL_ADMIN_KEYS: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC9bbTKjwyLcrAg7v6JoUtHbVu43sgEuHObqnVWBFBQDlktKda+0RkyhPMVM4ReqfnaMJ2U+IwzWiVaf/2gQ2CRACCm+idaPlu/Et3YIAcWtUhc2p8j8YPJqwMpbDwfwMWh7AdeIHS+/QyuFMnbP96/bMFvmli5kcpdL0zAqJ87DwPUqr6s3npM91T0+XExPBV40k93gQOkjVzJLCCRHP7AUkyH1JwQBb+Dg/E6BIv56w34eAhaJ2U0RjjZ1TJHrAhiANRdGreQGk4Pa+I8X85kTe2toEi+b5FvkfewskCeA1Yeo1MJikP2bevPdQAuzfTnqS2IacMBbnVcAuGFO5EahwPp1S3Kxgkhk5iSvTQ1kwd07Xoo12zFeV7eNvu/6lvJWiAFE5ZqQ5Ri/MoSQyxrlLkQxkWCcrXYUL6Bxm/kKU3+pHL/9DmEs71t2P9AqXtyBKTqtdhsKzDSFw4cxzaJ8Ygxop5C4SYdI6i2+guw992ojMEcTNHa7cgFbNvRs1dUL7ZxFl4vRtvixOjVXld69ugLmONWUoZB+zb9ptY6DX7v2fR3bRuW5hgzhua/jci8DhV3mkvhJPILtqjx+yDNEfOrYoPzQrhDGb4+hru/6i2r/b+zAfE2Fsd3B443UGRBhzbyo9YlQOuZjiTJHUxKhQGJ7QDdbwp6sBgr4LVGnw=="
    restart: unless-stopped

  cgit-private:
    image: oems/cgit
    container_name: cgit-private
    restart: unless-stopped
    volumes:
      - /opt/soft-serve/repos:/mnt/git
    networks:
      - proxy
    labels:
      - traefik.enable=true
      - traefik.http.routers.cgit-private.service=cgit-private
      - traefik.http.services.cgit-private.loadbalancer.server.port=80
      - traefik.http.routers.cgit-private.rule=Host(`git.c41ro.win`)
      - traefik.http.routers.cgit-private.entrypoints=websecure
      - traefik.http.routers.cgit-private.tls=true
      - traefik.http.routers.cgit-private.tls.certresolver=le
      - traefik.http.routers.cgit-private.middlewares=oidc-auth@file

  cgit-pub:
    image: oems/cgit
    container_name: cgit-pub
    restart: unless-stopped
    volumes:
      - /opt/soft-serve/repos/public:/mnt/git
    networks:
      - proxy
    labels:
      - traefik.enable=true
      - traefik.http.routers.cgit-pub.service=cgit-pub
      - traefik.http.services.cgit-pub.loadbalancer.server.port=80
      - traefik.http.routers.cgit-pub.rule=Host(`pub.git.c41ro.win`)
      - traefik.http.routers.cgit-pub.entrypoints=websecure
      - traefik.http.routers.cgit-pub.tls=true
      - traefik.http.routers.cgit-pub.tls.certresolver=le