# This docker-compose file reflects the production setup of git.zue.dev. It is here for reference and should be assumed to be what is running in production. It is not intended to be used for development or testing, and may not work as expected in those environments.

services:
  debian:
    image: ghcr.io/zuedev/git.zue.dev/debian:latest
    environment:
      AUTHORIZED_KEYS: |
        ssh-rsa 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 zuedev
    volumes:
      - ./repositories:/repositories
      - ./.secrets/github_token:/run/secrets/github_token:ro
      - ./.secrets/gitlab_token:/run/secrets/gitlab_token:ro
      - ./.secrets/codeberg_token:/run/secrets/codeberg_token:ro
      - ssh-host-keys:/run/ssh
    network_mode: service:tailscale
    depends_on:
      - tailscale

  cgit:
    image: ghcr.io/zuedev/git.zue.dev/cgit:latest
    volumes:
      - ./repositories:/srv/git:ro
    network_mode: service:tailscale
    depends_on:
      - tailscale

  tailscale:
    image: tailscale/tailscale:v1.92.4
    hostname: git
    environment:
      - TS_AUTH_ONCE="true"
      - TS_STATE_DIR=/var/lib/tailscale
      - TS_EXTRA_ARGS=--reset
    volumes:
      - ./tailscale-data:/var/lib/tailscale
      - /dev/net/tun:/dev/net/tun
    cap_add:
      - NET_ADMIN
      - NET_RAW
    restart: unless-stopped

volumes:
  ssh-host-keys: