version: '3.6'

services:
  web:
    image: 'gitlab/gitlab-ce:latest'
    container_name: gitlab
    restart: always
    network_mode: bridge
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        external_url 'https://gitlab.sectorq.eu'
        nginx['listen_port'] = 80
        nginx['listen_https'] = false
        gitlab_rails['ldap_enabled'] = true
        gitlab_rails['ldap_servers'] = {
          'main' => {
            'label' => 'LDAP',
            'host' =>  '192.168.77.106',
            'port' => 389,
            'uid' => 'sAMAccountName',
            'base' => 'dc=sectorq,dc=eu'
            'bind_dn' => 'CN=admin,DC=sectorq,DC=eu',
            'password' => 'l4c1j4yd33Du5lo',
            'encryption' => 'plain',
            'verify_certificates' => false,
            'timeout' => 10,
            'active_directory' => false,
            'user_filter' => '(employeeType=developer)',
            'base' => 'ou=people,dc=sectorq,dc=eu',
            'lowercase_usernames' => 'false',
            'retry_empty_result_with_codes' => [80],
            'allow_username_or_email_login' => false,
            'block_auto_created_users' => false
          }
        }

    hostname: 'gitlab.sectorq.eu'
    ports:
      - '8780:80'
      - '8743:443'
      - '8722:22'
    volumes:
      - '/share/docker_data/gitlab/config:/etc/gitlab'
      - '/share/docker_data/gitlab/logs:/var/log/gitlab'
      - '/share/docker_data/gitlab/data:/var/opt/gitlab'

    shm_size: '2gb'
    labels:
      com.centurylinklabs.watchtower.enable: true