version: 2
services:
    web:
        image: 'gitlab/gitlab-ce:latest'
        container_name: gitlab_ce
        restart: always
        hostname: 'gitlab'
        environment:
            GITLAB_OMNIBUS_CONFIG: |
                external_url 'https://gitlab.devops-lyon.eu'
                gitlab_rails['time_zone'] = 'Europe/Paris'
                gitlab_rails['gitlab_email_enabled'] = true
                gitlab_rails['gitlab_email_from'] = 'gitlab@mg.devops-lyon.eu'
                gitlab_rails['gitlab_email_display_name'] = 'Gitlab notification'
                gitlab_rails['gitlab_email_reply_to'] = 'noreply@mg.devops-lyon.eu'
                gitlab_rails['smtp_enable'] = true
                gitlab_rails['smtp_address'] = 'smtp.mailgun.org'
                gitlab_rails['smtp_port'] = 587
                gitlab_rails['smtp_user_name'] = 'gitlab@mg.devops-lyon.eu'
                gitlab_rails['smtp_password'] = '78ed007f9aa39cd0953f41bb91f3e7dc-f135b0f1-ba0caf5d'
                gitlab_rails['smtp_domain'] = 'mg.devops-lyon.eu'
                gitlab_rails['smtp_enable_starttls_auto'] = true
                gitlab_rails['initial_root_password'] = 'M0ukreneIsGood!'
                gitlab_rails['ldap_enabled'] = true
                gitlab_rails['ldap_servers'] = {
                    'main' => {
                        'label' => 'Pidom AD',
                        'host' =>  '192.168.111.252',
                        'port' => 636,
                        'uid' => 'sAMAccountName',
                        'verify_certificates' => false,
                        'bind_dn' => 'CN=ldapuser,OU=Users,OU=Dardilly,DC=pidom,DC=chezclement,DC=maison',
                        'encryption' => 'simple_tls',
                        'password' => 'E2ggSY3v33y5B6uwyjNXYGT2y_',
                        'active_directory' => true,
                        'base' => 'OU=Users,OU=Dardilly,DC=pidom,DC=chezclement,DC=maison',
                        'user_filter' => '(memberof=CN=gitusers,OU=Groups,OU=Dardilly,DC=pidom,DC=chezclement,DC=maison)'
                    }
                }
                nginx['enable'] = true
                nginx['redirect_http_to_https'] = false
                nginx['proxy_set_headers'] = {"X-Forwarded-Proto" => "http", "CUSTOM_HEADER" => "VALUE"}
                # Each address is added to the the NGINX config as 'set_real_ip_from <address>;'
                nginx['real_ip_trusted_addresses'] = [ '192.168.111.0/24' ]
                # other real_ip config options
                nginx['real_ip_header'] = 'X-Forwarded-For'
                nginx['real_ip_recursive'] = 'on'
                # gitlab_rails['smtp_authentication'] 'login'
                # Add any other gitlab.rb configuration here, each on its own line
        ports:
        - '4380:80'
        - '4322:22'
        - '4443:443'
        volumes:
        - 'gitlab_config:/etc/gitlab'
        - 'gitlab_logs:/var/log/gitlab'
        - 'gitlab_data:/var/opt/gitlab'