FROM gitea/gitea:latest-rootless AS gitea
FROM caddy:2.8-builder AS caddybuilder
RUN xcaddy build --with github.com/caddyserver/replace-response
FROM debian:stable-slim
RUN apt-get update && apt-get install -y ca-certificates git rsync tini && rm -rf /var/lib/apt/lists/*
COPY --from=gitea /usr/local/bin/gitea /usr/local/bin/gitea
COPY --from=caddybuilder /usr/bin/caddy /usr/bin/caddy
RUN adduser --disabled-password --gecos "" app && mkdir -p /data/gitea/conf /data/gitea/custom /data/custom /data/caddy && chown -R app:app /data
USER app
ENV GITEA_CUSTOM=/data/gitea
ENV GITEA__server__PROTOCOL=http
ENV GITEA__server__HTTP_PORT=3000
ENV GITEA__server__LFS_START_SERVER=true
ENV GITEA__security__INSTALL_LOCK=true
ENV GITEA__actions__ENABLED=true
ENV GITEA__database__DB_TYPE=sqlite3
ENV GITEA__database__PATH=/data/gitea/gitea.db
ENV GITEA__log__MODE=console
ENV GITEA__service__DISABLE_REGISTRATION=true
COPY Caddyfile.default /data/caddy/Caddyfile
COPY init.sh /usr/local/bin/init.sh
COPY start.sh /usr/local/bin/start.sh
RUN chmod +x /usr/local/bin/init.sh /usr/local/bin/start.sh
ENTRYPOINT ["/usr/bin/tini","--","/usr/local/bin/start.sh"]