services:
  web:
    environment:
      GITLAB_OMNIBUS_CONFIG: "external_url 'https://gitlab.sectorq.eu'\nnginx['listen_port']\
        \ = 80\nnginx['listen_https'] = false\nweb_server['username'] = 'git'\ngitlab_rails['time_zone']\
        \ = 'Europe/Bratislava'\ngitlab_rails['omniauth_enabled'] = true\ngitlab_rails['omniauth_allow_single_sign_on']\
        \ = ['saml']\ngitlab_rails['omniauth_sync_email_from_provider'] = 'saml'\n\
        gitlab_rails['omniauth_sync_profile_from_provider'] = ['saml']\ngitlab_rails['omniauth_sync_profile_attributes']\
        \ = ['email']\ngitlab_rails['omniauth_auto_sign_in_with_provider'] = 'saml'\n\
        gitlab_rails['omniauth_block_auto_created_users'] = false\ngitlab_rails['omniauth_auto_link_saml_user']\
        \ = true\ngitlab_rails['omniauth_providers'] = [\n  {\n    name: 'saml',\n\
        \    args: {\n      assertion_consumer_service_url: 'https://gitlab.sectorq.eu/users/auth/saml/callback',\n\
        \      # Shown when navigating to certificates in authentik1\n      idp_cert_fingerprint:\
        \ 'f7:fd:49:03:b3:38:52:b3:23:f5:43:c4:8d:08:65:32:e0:5a:7b:0e',\n      idp_sso_target_url:\
        \ 'https://auth.sectorq.eu/application/saml/gitlab/sso/binding/redirect/',\n\
        \      issuer: 'https://gitlab.sectorq.eu',\n      name_identifier_format:\
        \ 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent',\n      attribute_statements:\
        \ {\n        email: ['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress'],\n\
        \        first_name: ['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name'],\n\
        \        nickname: ['http://schemas.goauthentik.io/2021/02/saml/username']\n\
        \      }\n    },\n    label: 'authentik'\n  }\n]\n"
      TZ: Europe/Bratislava
    hostname: gitlab.sectorq.eu
    image: ${DOCKER_REGISTRY:-}gitlab/gitlab-ce:latest
    network_mode: bridge
    ports:
    - target: 80
      published: 8785
      protocol: tcp
      mode: ingress
    - target: 443
      published: 8743
      protocol: tcp
      mode: ingress
    - target: 22
      published: 8722
      protocol: tcp
      mode: ingress
    shm_size: 4gb
    volumes:
    - config:/etc/gitlab
    - logs:/var/log/gitlab
    - data:/var/opt/gitlab
    - /etc/localtime:/etc/localtime:ro
    deploy:
      labels:
        com.centurylinklabs.watchtower.enable: 'true'
        homepage.container: gitlab
        homepage.description: Version control
        homepage.group: Infrastructure
        homepage.href: https://gitlab.sectorq.eu
        homepage.icon: gitlab.png
        homepage.name: Gitlab
        homepage.server: my-docker-swarm
        homepage.weight: '1'
        homepage.widget.key: glpat-BuMKcaDqeD-Wx3dW4TM9
        homepage.widget.type: gitlab
        homepage.widget.url: https://gitlab.sectorq.eu
        homepage.widget.user_id: '2'
        wud.watch: 'true'
        wud.watch.digest: 'true'
      replicas: 1
      placement:
        constraints:
        - node.role == manager

volumes:
  config:
    driver: local
  logs:
    driver: local
  data:
    driver: local