sample.docker-compose.yml

services:
  gitlab:
    image: gitlab/gitlab-ce
    restart: always
    networks:
      - vcs
      - webproxy
    ports:
      - "${GITLAB_SHELL_SSH_PORT:-10022}:22"
    volumes:
      - ${GL_HOME:-.}/gitlab/config:/etc/gitlab
      - ${GL_HOME:-.}/gitlab/logs:/var/log/gitlab
      - ${GL_HOME:-.}/gitlab/data:/var/opt/gitlab
    labels:
      - traefik.enable=true
      - traefik.docker.network=webproxy
      - traefik.http.services.gitlab.loadbalancer.server.port=80
      - traefik.http.routers.gitlab.entrypoints=web
      - traefik.http.routers.gitlab.rule=Host(`gitlab.${GL_DOMAIN}`) || Host(`glcr.${GL_DOMAIN}`)
      - traefik.http.routers.gitlab.middlewares=http2https@file
      - traefik.http.routers.gitlab-sec.entrypoints=websecure
      - traefik.http.routers.gitlab-sec.rule=Host(`gitlab.${GL_DOMAIN}`) || Host(`glcr.${GL_DOMAIN}`)
      - traefik.http.routers.gitlab-sec.middlewares=sts@file
      - traefik.http.routers.gitlab-sec.tls.certresolver=${GL_CERTRESOLVER_NAME}
    environment:
      GITLAB_OMNIBUS_CONFIG: |
        ## GitLab URL
        external_url 'https://gitlab.${GL_DOMAIN}'

        ## gitlab.yml configuration
        gitlab_rails['time_zone'] = '${GL_TZ:-UTC}'

        ### Email Settings
        gitlab_rails['gitlab_email_enabled'] = true
        gitlab_rails['gitlab_email_from'] = 'gitlab@${GL_DOMAIN}'
        gitlab_rails['gitlab_email_display_name'] = 'GitLab'
        gitlab_rails['gitlab_email_reply_to'] = 'noreply@${GL_DOMAIN}'

        ### Default project feature settings
        gitlab_rails['gitlab_default_projects_features_builds'] = false
        gitlab_rails['gitlab_default_projects_features_container_registry'] = false

        ### Reply by email
        #gitlab_rails['incoming_email_enabled'] = true
        #### Incoming Email Address
        #gitlab_rails['incoming_email_address'] = "gitlab+%{key}@${GL_DOMAIN}"
        #### Email account username
        #gitlab_rails['incoming_email_email'] = "gitlab@${GL_DOMAIN}"
        #### Email account password
        #gitlab_rails['incoming_email_password'] = "[REDACTED]"
        #### IMAP Settings
        #gitlab_rails['incoming_email_host'] = "imap.${GL_DOMAIN}"
        #gitlab_rails['incoming_email_port'] = 993
        #gitlab_rails['incoming_email_ssl'] = true
        #gitlab_rails['incoming_email_start_tls'] = false
        #### Incoming Mailbox Settings
        #gitlab_rails['incoming_email_mailbox_name'] = "inbox"
        #gitlab_rails['incoming_email_idle_timeout'] = 60

        ### GitLab Shell settings for GitLab
        gitlab_rails['gitlab_shell_ssh_port'] = ${GITLAB_SHELL_SSH_PORT:-10022}

        ### GitLab application settings
        gitlab_rails['initial_root_password'] = "${GL_INITIAL_ROOT_PASSWORD:-password}"
        #gitlab_rails['initial_shared_runners_registration_token'] = "${GL_INITIAL_SHARED_RUNNERS_REGISTRATION_TOKEN}"

        ### GitLab email server settings
        gitlab_rails['smtp_enable'] = true
        gitlab_rails['smtp_address'] = "${GL_SMTP_ADDRESS:-smtp}"
        gitlab_rails['smtp_port'] = ${GL_SMTP_PORT:-8025}
        #gitlab_rails['smtp_user_name'] = "gitlab@${GL_DOMAIN}"
        #gitlab_rails['smtp_password'] = "${GL_SMTP_PASSWORD}"
        #gitlab_rails['smtp_domain'] = "${GL_DOMAIN}"
        #gitlab_rails['smtp_authentication'] = "login"
        #gitlab_rails['smtp_enable_starttls_auto'] = true
        #gitlab_rails['smtp_tls'] = false
        #gitlab_rails['smtp_openssl_verify_mode'] = 'none'

        ## Container Registry settings
        registry_external_url 'https://glcr.${GL_DOMAIN}'

        ### Settings used by GitLab application
        gitlab_rails['registry_enabled'] = true

        ### Registry database
        registry['database'] = {
          'enabled' => true,
        }

        ## GitLab PostgreSQL
        postgresql['shared_buffers'] = "256MB"

        ## GitLab NGINX
        #nginx['listen_addresses'] = ['0.0.0.0', '[::]']
        nginx['listen_port'] = 80
        nginx['listen_https'] = false
        nginx['proxy_set_headers'] = {
          "Host" => "$$http_host_with_default",
          "X-Real-IP" => "$$remote_addr",
          "X-Forwarded-For" => "$$proxy_add_x_forwarded_for",
          "X-Forwarded-Proto" => "https",
          "X-Forwarded-Ssl" => "on"
        }

        ## GitLab Kubernetes Agent Server
        gitlab_kas['env'] = {
          'OWN_PRIVATE_API_URL' => 'grpc://127.0.0.1:8155'
        }

        ## Container Registry NGINX
        registry_nginx['enable'] = true
        #registry_nginx['listen_addresses'] = ['*', '[::]']
        registry_nginx['listen_port'] = 80
        registry_nginx['listen_https'] = false
        registry_nginx['proxy_set_headers'] = {
          "Host" => "$$http_host",
          "X-Real-IP" => "$$remote_addr",
          "X-Forwarded-For" => "$$proxy_add_x_forwarded_for",
          "X-Forwarded-Proto" => "https",
          "X-Forwarded-Ssl" => "on"
        }

  gitlab-runner:
    image: gitlab/gitlab-runner
    restart: always
    networks:
      - vcs
    volumes:
      - ${GL_HOME:-.}/gitlab-runner/config:/etc/gitlab-runner
      - /var/run/docker.sock:/var/run/docker.sock

  smtp:
    image: devture/exim-relay:4.92.2-r0-0
    user: 100:101
    restart: always
    networks:
      - vcs

networks:
  vcs:
    external: true
  webproxy:
    external: true