docker-compose.yml

version: '3.8'
services:
  postgresql:
    image: postgres:14.1-alpine
    restart: unless-stopped
    environment:
      - POSTGRES_USER=gitlab
      - POSTGRES_PASSWORD=password
      - POSTGRES_DB=gitlabhq_production
    volumes:
      - /var/lib/gitlab/postgresql/:/var/lib/postgresql/
    healthcheck:
      test: ['CMD', 'pg_isready']
      interval: 10s
      start_period: 30s

  gitlab:
    image: sameersbn/gitlab:14.5.2
    restart: unless-stopped
    ports:
      - "9922:22"
    healthcheck:
      test: ["CMD", "/usr/local/sbin/healthcheck"]
      interval: 5m
      timeout: 10s
      retries: 3
      start_period: 5m
    env_file: gitlab.env
    environment:
      - VIRTUAL_HOST=gitlab.example.com
      # - LETSENCRYPT_HOST=gitlab.example.com
      # - LETSENCRYPT_EMAIL=contact@example.com
      - DEBUG=false
      - TZ=Europe/Paris

      - USERMAP_UID=1010
      - USERMAP_GID=1010

      - DB_ADAPTER=postgresql
      - DB_HOST=postgresql
      - DB_NAME=gitlabhq_production
      - DB_USER=gitlab
      - DB_PASS=password

      - REDIS_HOST=redis
      - REDIS_PORT=6379
      - GITLAB_TIMEZONE=Paris
      - GITLAB_HOST=gitlab.example.com
      - GITLAB_PORT=10080
      - GITLAB_SSH_PORT=22
      - GITLAB_RELATIVE_URL_ROOT=

      - GITLAB_NOTIFY_ON_BROKEN_BUILDS=true
      - GITLAB_NOTIFY_PUSHER=false

      - GITLAB_EMAIL=notifications@gitlab.example.com
      - GITLAB_EMAIL_REPLY_TO=noreply@gitlab.example.com
      - GITLAB_INCOMING_EMAIL_ADDRESS=reply@gitlab.example.com

      - GITLAB_BACKUP_SCHEDULE=daily
      - GITLAB_BACKUP_TIME=01:00
      - GITLAB_BACKUP_EXPIRY=604800
      - GITLAB_BACKUP_DIR=/home/git/data/backups

      - SMTP_ENABLED=true
      - SMTP_DOMAIN=gitlab.example.com
      - SMTP_HOST=postfix
      - SMTP_PORT=25
      - SMTP_USER=user
      - SMTP_PASS=password
      - SMTP_STARTTLS=true
      - SMTP_AUTHENTICATION=login

      - IMAP_ENABLED=false
      - IMAP_HOST=imap.gmail.com
      - IMAP_PORT=993
      - IMAP_USER=mailer@example.com
      - IMAP_PASS=password
      - IMAP_SSL=true
      - IMAP_STARTTLS=false

      - GITLAB_REGISTRY_ENABLED=true
      - GITLAB_REGISTRY_HOST=registry.example.com
      - GITLAB_REGISTRY_PORT=443
      - GITLAB_REGISTRY_API_URL=http://registry:5000
      - GITLAB_REGISTRY_KEY_PATH=/certs/registry.key
    volumes:
      - /var/lib/gitlab/data/:/home/git/data
      - /home/git/.ssh/authorized_keys_proxy:/home/git/data/.ssh/authorized_keys_proxy
      - ./certs:/certs
    depends_on:
      postgresql:
        condition: service_healthy
      redis:
        condition: service_healthy
      postfix:
        condition: service_started
      registry:
        condition: service_started

  redis:
    image: sameersbn/redis:latest
    restart: unless-stopped
    volumes:
      - /var/lib/gitlab/redis/:/var/lib/redis
    healthcheck:
      test: ["CMD", "redis-cli","ping"]

  postfix:
    image: marvambass/versatile-postfix:latest
    restart: unless-stopped
    volumes:
      - ./dkim:/etc/postfix/dkim/
      - ./maildirs:/var/mail
    environment:
      - DKIM_SELECTOR=gitlab
    command: gitlab.example.com user:password

  registry:
    image: registry
    restart: unless-stopped
    volumes:
      - /var/lib/gitlab/registry/:/registry
      - ./certs:/certs
    environment:
      - VIRTUAL_HOST=registry.example.com
      - REGISTRY_LOG_LEVEL=info
      - REGISTRY_STORAGE_FILESYSTEM_ROOTDIRECTORY=/registry
      - REGISTRY_AUTH_TOKEN_REALM=https://gitlab.example.com/jwt/auth
      - REGISTRY_AUTH_TOKEN_SERVICE=container_registry
      - REGISTRY_AUTH_TOKEN_ISSUER=gitlab-issuer
      - REGISTRY_AUTH_TOKEN_ROOTCERTBUNDLE=/certs/registry.crt
      - REGISTRY_STORAGE_DELETE_ENABLED=true