gistfile1.txt

version: '2'

services:
  postgresql:
    image: sameersbn/postgresql:9.4-22
    restart: always
    environment:
      - DB_USER=gitlab
      - DB_PASS=geheim
      - DB_NAME=gitlabhq_production
      - DB_EXTENSION=pg_trgm
    volumes:
      - /srv/gitlab/postgresql:/var/lib/postgresql:Z
  redis:
    image: sameersbn/redis:latest
    restart: always
    volumes:
      - /srv/gitlab/redis/:/var/lib/redis:Z
  gitlab:
    image: sameersbn/gitlab:8.9.6
    restart: always
    depends_on:
      - redis
      - postgresql
    ports:
      - "8280:80"
      - "10022:22"
      - "5500:5500"
    environment:
      - DEBUG=false
      - TZ=Europe/Berlin
      - SMTP_ENABLED=true
      - SMTP_DOMAIN=www.gmail.com
      - SMTP_HOST=smtp.gmail.com
      - SMTP_PORT=587
      - SMTP_USER=name
      - SMTP_PASS=geheimer
      - SMTP_STARTTLS=true
      - SMTP_AUTHENTICATION=login
      - GITLAB_TIMEZONE=UTC
      - GITLAB_HOST=git.domain.de
      - GITLAB_HTTPS=true
      - GITLAB_PORT=443
      - GITLAB_SSH_PORT=10022
      - GITLAB_EMAIL=admin@domain.de
      - GITLAB_EMAIL_REPLY_TO=noreply@domain.de
      - GITLAB_BACKUPS=weekly
      - GITLAB_BACKUP_TIME=01:00
      - DB_ADAPTER=postgresql
      - DB_HOST=postgresql
      - DB_PORT=5432
      - DB_USER=gitlab
      - DB_PASS=geheim
      - DB_NAME=gitlabhq_production
      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - GITLAB_SECRETS_DB_KEY_BASE=t52pj7KR8Uu287a1rCEl
      - GITLAB_REGISTRY_ENABLED=true
      - GITLAB_REGISTRY_HOST=registry.domain.de
      - GITLAB_REGISTRY_PORT=5500
      - GITLAB_REGISTRY_API_URL=http://registry:5000
      - GITLAB_REGISTRY_KEY_PATH=/certs/registry-auth.key
      - GITLAB_REGISTRY_ISSUER=gitlab-issuer
      - SSL_REGISTRY_KEY_PATH=/certs/registry.key
      - SSL_REGISTRY_CERT_PATH=/certs/registry.crt
      - LDAP_ENABLED=true
      - LDAP_LABEL=FreeIPA
      - LDAP_HOST=mummie.intern
      - LDAP_PORT=389
      - LDAP_UID=uid
      - LDAP_METHOD=tls
      - LDAP_BIND_DN=uid=srvgitlab,cn=users,cn=accounts,dc=intern
      - LDAP_PASS=auchgeheim
      - LDAP_BASE=cn=accounts,dc=intern
      - LDAP_USER_FILTER=memberOf=cn=git,cn=groups,cn=accounts,dc=intern
    volumes:
      - /srv/gitlab/data:/home/git/data:Z
      - /srv/gitlab/logs:/var/log/gitlab
      - ./certs:/certs

  registry:
    restart: always
    image: registry:2.4.1
    volumes:
       - /srv/gitlab/shared/registry:/registry
       - ./certs:/certs
    environment:
      - REGISTRY_LOG_LEVEL=info
      - REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY=/registry
      - REGISTRY_AUTH_TOKEN_REALM=https://git.domain.de/jwt/auth
      - REGISTRY_AUTH_TOKEN_SERVICE=container_registry
      - REGISTRY_AUTH_TOKEN_ISSUER=gitlab-issuer
      - REGISTRY_AUTH_TOKEN_ROOTCERTBUNDLE=/certs/registry-auth.crt
      - REGISTRY_STORAGE_DELETE_ENABLED=true