3 files changed, 72 insertions, 0 deletions
diff --git a/template/docker-compose.yaml.template b/template/docker-compose.yaml.template
index 678a7e4..f263cbf 100644
--- a/template/docker-compose.yaml.template
+++ b/template/docker-compose.yaml.template
@@ -163,6 +163,20 @@ services:
       - ./data/debian-dev:/data
       - debian-dev-home:/home/crupest
 
+  forgejo:
+    image: codeberg.org/forgejo/forgejo:9
+    pull_policy: always
+    container_name: forgejo
+    restart: on-failure:3
+    environment:
+      - USER_UID=1000
+      - USER_GID=1000
+    volumes:
+      - ./forgejo.app.ini:/data/gitea/conf/app.ini
+      - ./data/forgejo:/data
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+
 volumes:
   blog-public:
   debian-dev-home:
diff --git a/template/forgejo.app.ini.template b/template/forgejo.app.ini.template
new file mode 100644
index 0000000..4fbcdec
--- /dev/null
+++ b/template/forgejo.app.ini.template
@@ -0,0 +1,53 @@
+APP_NAME = Forgejo, loved by crupest.
+RUN_MODE = prod
+
+[repository]
+ROOT = /data/git/repositories
+
+[server]
+APP_DATA_PATH = /data/gitea
+HTTP_ADDR        = 0.0.0.0
+HTTP_PORT        = 3000
+USE_PROXY_PROTOCOL = true
+DISABLE_SSH      = true
+LFS_START_SERVER = true
+
+[database]
+DB_TYPE = sqlite3
+
+[security]
+INSTALL_LOCK = false
+SECRET_KEY = ${CRUPEST_FORGEJO_SECURITY_KEY}
+REVERSE_PROXY_LIMIT = 1
+REVERSE_PROXY_TRUSTED_PROXIES = *
+
+[service]
+DISABLE_REGISTRATION = false
+ALLOW_ONLY_INTERNAL_REGISTRATION = true
+
+[mailer]
+ENABLED = true
+PROTOCOL = smtp
+SMTP_ADDR = mail.${CRUPEST_DOMAIN}
+SMTP_PORT = 465
+USER = ${CRUPEST_FORGEJO_MAILER_USER}
+PASSWD = ${CRUPEST_FORGEJO_MAILER_PASSWD}
+
+[email.incoming]
+ENABLED = true
+HOST = mail.${CRUPEST_DOMAIN}
+PORT = 993
+USERNAME = ${CRUPEST_FORGEJO_EMAIL_INCOMING_USER}
+PASSWORD = ${CRUPEST_FORGEJO_EMAIL_INCOMING_PASSWORD}
+USE_TLS = true
+
+[log]
+MODE = console,file
+
+[cron]
+ENABLED = true
+
+[log.file]
+
+[actions]
+ENABLED = false
diff --git a/template/nginx/server.json b/template/nginx/server.json
index eadce1e..c9a6108 100644
--- a/template/nginx/server.json
+++ b/template/nginx/server.json
@@ -12,6 +12,11 @@
             "upstream": "debian-dev:8080"
         },
         {
+            "type": "reverse-proxy",
+            "subdomain": "git",
+            "upstream": "forgejo:3000"
+        },
+        {
             "type": "static-file",
             "subdomain": "blog",
             "root": "/srv/blog"