version: "3.8"

services:
  app:
    image: gitlab/gitlab-ce:13.10.2-ce.0
    restart: "no"
    hostname: "${CN}"
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        external_url "https://${CN}"
        # Add any other gitlab.rb configuration here, each on its own line
        nginx['listen_https'] = false
        nginx['listen_port'] = 80
    networks:
      - proxy
    ports:
      - "${SSH_PORT}:22"
    volumes:
      - ${DATA_PATH}/config:/etc/gitlab
      - ${DATA_PATH}/logs:/var/log/gitlab
      - ${DATA_PATH}/data:/var/opt/gitlab
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.gitlab-https.service=app"
      - "traefik.http.services.app.loadbalancer.server.port=80"
      - "traefik.http.middlewares.gitlab-redirect-websecure.redirectscheme.scheme=https"
      - "traefik.http.routers.gitlab-http.middlewares=gitlab-redirect-websecure"
      - "traefik.http.routers.gitlab-http.rule=Host(`${CN}`)"
      - "traefik.http.routers.gitlab-http.entrypoints=web"
      - "traefik.http.routers.gitlab-https.rule=Host(`${CN}`)"
      - "traefik.http.routers.gitlab-https.entrypoints=websecure"
      - "traefik.http.routers.gitlab-https.tls=true"
      - "traefik.http.routers.gitlab-https.tls.certresolver=myhttpchallenge"

networks:
  proxy:
    external: true