mirror of
https://gitlab.sectorq.eu/home/docker-compose.git
synced 2025-12-14 10:24:53 +01:00
73 lines
3.0 KiB
YAML
73 lines
3.0 KiB
YAML
services:
|
|
web:
|
|
environment:
|
|
GITLAB_OMNIBUS_CONFIG: "external_url 'https://gitlab.sectorq.eu'\nnginx['listen_port']\
|
|
\ = 80\nnginx['listen_https'] = false\nweb_server['username'] = 'git'\ngitlab_rails['time_zone']\
|
|
\ = 'Europe/Bratislava'\ngitlab_rails['omniauth_enabled'] = true\ngitlab_rails['omniauth_allow_single_sign_on']\
|
|
\ = ['saml']\ngitlab_rails['omniauth_sync_email_from_provider'] = 'saml'\n\
|
|
gitlab_rails['omniauth_sync_profile_from_provider'] = ['saml']\ngitlab_rails['omniauth_sync_profile_attributes']\
|
|
\ = ['email']\ngitlab_rails['omniauth_auto_sign_in_with_provider'] = 'saml'\n\
|
|
gitlab_rails['omniauth_block_auto_created_users'] = false\ngitlab_rails['omniauth_auto_link_saml_user']\
|
|
\ = true\ngitlab_rails['omniauth_providers'] = [\n {\n name: 'saml',\n\
|
|
\ args: {\n assertion_consumer_service_url: 'https://gitlab.sectorq.eu/users/auth/saml/callback',\n\
|
|
\ # Shown when navigating to certificates in authentik1\n idp_cert_fingerprint:\
|
|
\ 'f7:fd:49:03:b3:38:52:b3:23:f5:43:c4:8d:08:65:32:e0:5a:7b:0e',\n idp_sso_target_url:\
|
|
\ 'https://auth.sectorq.eu/application/saml/gitlab/sso/binding/redirect/',\n\
|
|
\ issuer: 'https://gitlab.sectorq.eu',\n name_identifier_format:\
|
|
\ 'urn:oasis:names:tc:SAML:2.0:nameid-format:persistent',\n attribute_statements:\
|
|
\ {\n email: ['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress'],\n\
|
|
\ first_name: ['http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name'],\n\
|
|
\ nickname: ['http://schemas.goauthentik.io/2021/02/saml/username']\n\
|
|
\ }\n },\n label: 'authentik'\n }\n]\n"
|
|
TZ: Europe/Bratislava
|
|
hostname: gitlab.sectorq.eu
|
|
image: ${DOCKER_REGISTRY:-}gitlab/gitlab-ce:latest
|
|
network_mode: bridge
|
|
ports:
|
|
- target: 80
|
|
published: 8785
|
|
protocol: tcp
|
|
mode: ingress
|
|
- target: 443
|
|
published: 8743
|
|
protocol: tcp
|
|
mode: ingress
|
|
- target: 22
|
|
published: 8722
|
|
protocol: tcp
|
|
mode: ingress
|
|
shm_size: 4gb
|
|
volumes:
|
|
- config:/etc/gitlab
|
|
- logs:/var/log/gitlab
|
|
- data:/var/opt/gitlab
|
|
- /etc/localtime:/etc/localtime:ro
|
|
deploy:
|
|
labels:
|
|
com.centurylinklabs.watchtower.enable: 'true'
|
|
homepage.container: gitlab
|
|
homepage.description: Version control
|
|
homepage.group: Infrastructure
|
|
homepage.href: https://gitlab.sectorq.eu
|
|
homepage.icon: gitlab.png
|
|
homepage.name: Gitlab
|
|
homepage.server: my-docker-swarm
|
|
homepage.weight: '1'
|
|
homepage.widget.key: glpat-BuMKcaDqeD-Wx3dW4TM9
|
|
homepage.widget.type: gitlab
|
|
homepage.widget.url: https://gitlab.sectorq.eu
|
|
homepage.widget.user_id: '2'
|
|
wud.watch: 'true'
|
|
wud.watch.digest: 'true'
|
|
replicas: 1
|
|
placement:
|
|
constraints:
|
|
- node.role == manager
|
|
|
|
volumes:
|
|
config:
|
|
driver: local
|
|
logs:
|
|
driver: local
|
|
data:
|
|
driver: local |