Dateien nach „Node1/Docker (100)/Forgejo“ hochladen

Node1/Docker (100)/Forgejo/compose.yaml

@@ -0,0 +1,49 @@
+services:
+  forgejo:
+    image: codeberg.org/forgejo/forgejo:9
+    container_name: forgejo
+    restart: unless-stopped
+    environment:
+      - USER_UID=1000
+      - USER_GID=1000
+      - FORGEJO__database__DB_TYPE=postgres
+      - FORGEJO__database__HOST=forgejo-db:5432
+      - FORGEJO__database__NAME=${DB_NAME}
+      - FORGEJO__database__USER=${DB_USER}
+      - FORGEJO__database__PASSWD=${DB_PASSWORD}
+      - FORGEJO__server__DOMAIN=git.mbraune.com
+      - FORGEJO__server__ROOT_URL=https://git.mbraune.com
+      - FORGEJO__server__HTTP_PORT=3000
+      - FORGEJO__service__DISABLE_REGISTRATION=true
+    volumes:
+      - ./data:/data
+    depends_on:
+      forgejo-db:
+        condition: service_healthy
+    networks:
+      - forgejo_internal
+      - git_net
+
+  forgejo-db:
+    image: postgres:16-alpine
+    container_name: forgejo-db
+    restart: unless-stopped
+    environment:
+      - POSTGRES_DB=${DB_NAME}
+      - POSTGRES_USER=${DB_USER}
+      - POSTGRES_PASSWORD=${DB_PASSWORD}
+    volumes:
+      - ./db:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${DB_USER} -d ${DB_NAME}"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    networks:
+      - forgejo_internal
+
+networks:
+  forgejo_internal:
+    driver: bridge
+  git_net:
+    external: true

Node1/Docker (100)/Forgejo/readme.md

@@ -0,0 +1,108 @@
+# 🏠 Homelab Docker Stack
+
+Übersicht aller selbst gehosteten Services, aufgeteilt nach Host.
+Secrets werden **nicht** hier gespeichert → Vaultwarden (pass.mbraune.com).
+
+---
+
+## 📡 Infrastruktur
+
+| Komponente | Detail |
+|---|---|
+| Externe Domain | mbraune.com |
+| Tunnel | Pangolin / Newt (Zero-Trust) |
+| Internes Netz | 192.168.178.x (Proxmox-LXC-Stack) |
+| Docker-Netzwerk | `proxy_net` (extern erreichbar via Newt) |
+| Compose-Dateiname | immer `compose.yaml` |
+
+---
+
+## 🖥️ Proxmox LXC (192.168.178.50)
+
+| Service | URL | Port intern | Status |
+|---|---|---|---|
+| Forgejo | git.mbraune.com | 3000 | ✅ |
+| Nextcloud | | | ✅ |
+| Vaultwarden | pass.mbraune.com | | ✅ |
+| Gotify | | | ✅ |
+| IT-Tools | | | ✅ |
+| Newt | — | — | ✅ |
+| Beszel Agent | — | — | ✅ |
+| Dockhand | — | — | ✅ |
+
+---
+
+## 🗄️ Synology NAS
+
+| Service | URL | Port intern | Status |
+|---|---|---|---|
+| Jellyfin | | | ✅ |
+| Immich | | | ✅ |
+| Homarr | | | ✅ |
+| Planka | | | ✅ |
+| Vikunja | | | ✅ |
+| Uptime Kuma | | | ✅ |
+| Stirling PDF | | | ✅ |
+| Beszel | | | ✅ |
+| Portracker | | | ✅ |
+
+---
+
+## 📁 Repo-Struktur
+
+```
+homelab-docker/
+├── proxmox/
+│   ├── forgejo/
+│   │   ├── compose.yaml
+│   │   ├── .env.example
+│   │   └── README.md
+│   ├── nextcloud/
+│   │   ├── compose.yaml
+│   │   ├── .env.example
+│   │   └── README.md
+│   └── vaultwarden/
+│       ├── compose.yaml
+│       ├── .env.example
+│       └── README.md
+├── nas/
+│   ├── jellyfin/
+│   │   ├── compose.yaml
+│   │   └── README.md
+│   └── ...
+└── README.md
+```
+
+---
+
+## 🔐 Secrets-Verwaltung
+
+- Echte `.env`-Dateien (mit Passwörtern) → **Vaultwarden Secure Note** pro Service
+- In diesem Repo nur `.env.example` mit leeren Werten committen
+- Niemals echte Secrets committen
+
+---
+
+## 📝 Service README-Vorlage
+
+Jeder Service-Ordner hat eine eigene `README.md`:
+
+```markdown
+# Service Name
+
+## Info
+- **URL:** https://subdomain.mbraune.com
+- **Host:** Proxmox LXC / Synology NAS
+- **Interner Port:** 3000
+
+## Abhängigkeiten
+- proxy_net (Pangolin/Newt)
+- PostgreSQL (forgejo-db)
+
+## Besonderheiten
+- Registrierung deaktiviert (DISABLE_REGISTRATION=true)
+- ...
+
+## Letzte Änderungen
+- 2026-08-05: Initiales Setup
+```