docker-compose.yml had drifted from the committed version during the move to
this host: a dedicated gitea-postgres service replaces the shared postgres-db
on the LAN box, and SSH is now published on the netbird interface only
(100.75.252.111:2222) instead of 0.0.0.0.
The database password is no longer inline — both POSTGRES_PASSWORD and
GITEA__database__PASSWD read ${POSTGRES_PASSWORD} from .env (gitignored,
mode 0600). .env.example documents the key, and *.bak-* is now ignored.
Note: run docker compose from this directory, otherwise .env is not picked up
and the variable resolves empty.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Kjn2zm5PJ5y9t4HjpGouWR
The git user inside the gitea container couldn't write to the NAS-mounted
/tmp/backup directory. Now dumps to /tmp first, then uses docker cp to
extract the file to the sidecar's backup directory.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Alpine sidecar container runs gitea dump via docker exec at 2 AM daily,
writing backups to /data/backup/gitea/ with 7-day retention.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
magnusandClaude Opus 5