基于docker搭建gitea私服仓库，并开启https访问、ssh访问和邮箱验证通知功能

DOCKER_CONFIG=${DOCKER_CONFIG:-$HOME/.docker}
mkdir -p $DOCKER_CONFIG/cli-plugins
curl -SL https://github.com/docker/compose/releases/download/v2.19.0/docker-compose-linux-x86_64 -o $DOCKER_CONFIG/cli-plugins/docker-compose

chmod +x $DOCKER_CONFIG/cli-plugins/docker-compose

version: "3"
networks:
  gitea:
    external: false
services:
  server:
    image: gitea/gitea:1.19
    container_name: gitea
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - GITEA__database__DB_TYPE=mysql      
      - GITEA__database__HOST=127.0.0.1:3306       # 可以访问到的MySQL的ip和port
      - GITEA__database__NAME=giteadb              # 给gitea用的数据库名，可自定义
      - GITEA__database__USER=gitea                # 给gitea用的用户名，可自定义
      - GITEA__database__PASSWD=gitea              # 给gitea用户的数据库密码，可自定义
    restart: always
    networks:
      - gitea
    volumes:
      - ./gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "3000:3000"
      - "10022:22"             # 将来22端口会映射到10022端口，10022端口可自定义

CREATE USER 'gitea'@'192.0.2.10' IDENTIFIED BY 'gitea';    # ip位置可以改为%，表示任何人都可以访问
CREATE DATABASE giteadb CHARACTER SET 'utf8mb4' COLLATE 'utf8mb4_unicode_ci';
GRANT ALL PRIVILEGES ON giteadb.* TO 'gitea'@'192.0.2.10';  # ip可改为%
FLUSH PRIVILEGES;

server {
    listen 443 ssl;
    server_name git.nideyuming.com; 
    ssl_certificate /etc/nginx/ssl/cert/git.nideyuming_nginx/git.nideyuming_bundle.pem;
    ssl_certificate_key /etc/nginx/ssl/cert/git.nideyuming_nginx/git.nideyuming.key;
    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers on;
    location / {
        proxy_pass http://127.0.0.1:3000;
    }
}

[mailer]
ENABLED = true
SMTP_ADDR = smtp.qq.com         # 这里是固定的qq邮箱smtp地址
SMTP_PORT = 465                 # 端口也固定
FROM = 123456789@qq.com         # 这里是你的QQ邮箱号
USER = 123456789@qq.com         # 这里是你的QQ邮箱号
PASSWD = cnslgzhabcfededh       # 这里是生成的授权码
MAILER_TYPE = smtp              # 这里是固定的smtp
IS_TLS_ENABLED = true           # 这里是固定的true

[service]
DISABLE_REGISTRATION              = false
REQUIRE_SIGNIN_VIEW               = false
REGISTER_EMAIL_CONFIRM            = true
ENABLE_NOTIFY_MAIL                = true
ALLOW_ONLY_EXTERNAL_REGISTRATION  = false
ENABLE_CAPTCHA                    = false
DEFAULT_KEEP_EMAIL_PRIVATE        = false
DEFAULT_ALLOW_CREATE_ORGANIZATION = true
DEFAULT_ENABLE_TIMETRACKING       = true
NO_REPLY_ADDRESS                  = noreply.localhost

version: "3"
networks:
  gitea:
    external: false
services:
  server:
    image: gitea/gitea:latest
    container_name: gitea
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - GITEA__database__DB_TYPE=mysql
      - GITEA__database__HOST=db:3306
      - GITEA__database__NAME=gitea
      - GITEA__database__USER=gitea
      - GITEA__database__PASSWD=gitea
    restart: always
    networks:
      - gitea
    volumes:
      - ./gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "3000:3000"
      - "222:22"
    depends_on:
      - db
  db:
    image: mysql:8
    restart: always
    environment:
      - MYSQL_ROOT_PASSWORD=gitea
      - MYSQL_USER=gitea
      - MYSQL_PASSWORD=gitea
      - MYSQL_DATABASE=gitea
    networks:
      - gitea
    volumes:
      - ./mysql:/var/lib/mysql