first

.gitignore

@@ -0,0 +1,52 @@
+# -------------------------
+# SSH private keys
+# -------------------------
+id_*
+*.pem
+*.key
+*.private
+
+# -------------------------
+# SSH runtime files
+# -------------------------
+authorized_keys
+known_hosts
+known_hosts.old
+
+# -------------------------
+# Agent / sockets
+# -------------------------
+ssh-agent*
+*.sock
+
+# -------------------------
+# Backup / temp
+# -------------------------
+*.bak
+*.tmp
+*.swp
+*~
+
+# -------------------------
+# Logs
+# -------------------------
+*.log
+
+# -------------------------
+# OS files
+# -------------------------
+.DS_Store
+Thumbs.db
+
+# -------------------------
+# Editors
+# -------------------------
+.vscode/
+.idea/
+
+# -------------------------
+# Git safety
+# -------------------------
+.env
+*.env
+*.secret

docker-compose.yaml

@@ -0,0 +1,45 @@
+services:
+  gitea:
+    image: docker.gitea.com/gitea:1.25.4
+    container_name: gitea
+    restart: unless-stopped
+    env_file:
+      - .env
+    environment:
+      USER_UID: "${USER_UID}"
+      USER_GID: "${USER_GID}"
+      GITEA__server__DOMAIN: "${GITEA_DOMAIN}"
+      GITEA__server__ROOT_URL: "${GITEA_ROOT_URL}"
+      GITEA__server__SSH_DOMAIN: "${GITEA_SSH_DOMAIN}"
+      GITEA__server__SSH_PORT: "${GITEA_SSH_PORT}"
+      GITEA__repository__ROOT: "${GITEA_REPOSITORY_ROOT}"
+      GITEA__repository__DEFAULT_PRIVATE: "${GITEA_DEFAULT_PRIVATE}"
+      GITEA__repository__DEFAULT_PUSH_CREATE_PRIVATE: "${GITEA_DEFAULT_PUSH_CREATE_PRIVATE}"
+      GITEA__repository__ENABLE_PUSH_CREATE_USER: "${GITEA_ENABLE_PUSH_CREATE_USER}"
+      GITEA__repository__ENABLE_PUSH_CREATE_ORG: "${GITEA_ENABLE_PUSH_CREATE_ORG}"
+    volumes:
+      - ../data:/data
+      - ../git:/git
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+    ports:
+      - "3000:3000"
+      - "2222:22"
+    networks:
+      - gitea_net
+
+  cloudflared:
+    image: cloudflare/cloudflared:latest
+    container_name: cloudflared
+    restart: unless-stopped
+    command: tunnel --no-autoupdate run
+    environment:
+      TUNNEL_TOKEN: "${CLOUDFLARE_TUNNEL_TOKEN}"
+    depends_on:
+      - gitea
+    networks:
+      - gitea_net
+
+networks:
+  gitea_net:
+    driver: bridge