91 lines
3.4 KiB
YAML
91 lines
3.4 KiB
YAML
services:
|
|
gitlab:
|
|
image: gitlab/gitlab-ce:19.2.1-ce.0
|
|
container_name: gitlab
|
|
restart: unless-stopped
|
|
hostname: gitlab.local
|
|
ports:
|
|
- "2224:22"
|
|
volumes:
|
|
- ./config:/etc/gitlab
|
|
- ./logs:/var/log/gitlab
|
|
- ./data:/var/opt/gitlab
|
|
shm_size: '256m'
|
|
environment:
|
|
GITLAB_OMNIBUS_CONFIG: |
|
|
gitlab_rails['monitoring_whitelist'] = ['127.0.0.1', '10.0.0.0/8', '172.16.0.0/12', '192.168.0.0/16']
|
|
external_url 'https://gitlab.home.server'
|
|
|
|
nginx['listen_port'] = 80
|
|
nginx['listen_https'] = false
|
|
nginx['proxy_set_headers'] = {
|
|
"X-Forwarded-Proto" => "https",
|
|
"X-Forwarded-Ssl" => "on"
|
|
}
|
|
|
|
gitlab_rails['gitlab_shell_ssh_port'] = 2224
|
|
|
|
# Trim workers for a 4-core / 8GB host
|
|
puma['worker_processes'] = 2
|
|
puma['min_threads'] = 1
|
|
puma['max_threads'] = 4
|
|
sidekiq['max_concurrency'] = 10
|
|
postgresql['shared_buffers'] = "256MB"
|
|
|
|
# You already have this stack running — turn GitLab's copies off
|
|
prometheus_monitoring['enable'] = false
|
|
alertmanager['enable'] = false
|
|
node_exporter['enable'] = false
|
|
redis_exporter['enable'] = false
|
|
postgres_exporter['enable'] = false
|
|
gitlab_exporter['enable'] = false
|
|
|
|
# Registry
|
|
registry['enable'] = true
|
|
registry_external_url 'https://registry.home.server'
|
|
gitlab_rails['registry_enabled'] = true
|
|
gitlab_rails['registry_host'] = "registry.home.server"
|
|
gitlab_rails['registry_port'] = "443"
|
|
registry_nginx['listen_port'] = 5050
|
|
registry_nginx['listen_https'] = false
|
|
networks:
|
|
- web_net
|
|
labels:
|
|
- "traefik.enable=true"
|
|
- "traefik.docker.network=web_net"
|
|
|
|
# --- Web UI ---
|
|
- "traefik.http.routers.gitlab.rule=Host(`gitlab.home.server`)"
|
|
- "traefik.http.routers.gitlab.entrypoints=websecure"
|
|
- "traefik.http.routers.gitlab.tls=true"
|
|
- "traefik.http.routers.gitlab.service=gitlab"
|
|
- "traefik.http.routers.gitlab.middlewares=security-headers@file"
|
|
- "traefik.http.routers.gitlab-http.rule=Host(`gitlab.home.server`)"
|
|
- "traefik.http.routers.gitlab-http.entrypoints=web"
|
|
- "traefik.http.routers.gitlab-http.service=gitlab"
|
|
- "traefik.http.routers.gitlab-http.middlewares=redirect-to-https@file"
|
|
- "traefik.http.services.gitlab.loadbalancer.server.port=80"
|
|
|
|
# --- Container Registry ---
|
|
- "traefik.http.routers.registry.rule=Host(`registry.home.server`)"
|
|
- "traefik.http.routers.registry.entrypoints=websecure"
|
|
- "traefik.http.routers.registry.tls=true"
|
|
- "traefik.http.routers.registry.service=registry"
|
|
- "traefik.http.routers.registry.middlewares=security-headers@file"
|
|
- "traefik.http.routers.registry-http.rule=Host(`registry.home.server`)"
|
|
- "traefik.http.routers.registry-http.entrypoints=web"
|
|
- "traefik.http.routers.registry-http.service=registry"
|
|
- "traefik.http.routers.registry-http.middlewares=redirect-to-https@file"
|
|
- "traefik.http.services.registry.loadbalancer.server.port=5050"
|
|
|
|
gitlab-runner:
|
|
image: gitlab/gitlab-runner:latest
|
|
container_name: gitlab-runner
|
|
restart: unless-stopped
|
|
volumes:
|
|
- ./runner-config:/etc/gitlab-runner
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
|
|
networks:
|
|
web_net:
|
|
external: true |