Hop
e4c76dc93a
Hop-State: A_06FN5JKZ6CTGH9CGNFHTXM0 Hop-Proposal: R_06FN5JG8ANPH2Q6BBKD7YMG Hop-Task: T_06FN50V05VH5V9WE9QQF9KR Hop-Attempt: AT_06FN5J4ZA8XA979AVSBCSNG
976 B
976 B
Production deployment
Run the Compose stack behind an HTTPS reverse proxy. Keep the Gitea HTTP port and Hop control-plane port bound to loopback; only publish Gitea's SSH port if the deployment has a DNS-only hostname that can reach it without an HTTP proxy.
Start from .env.example, replace every secret, and set at least:
GITEA_DOMAIN=git.example.com
GITEA_ROOT_URL=https://git.example.com/
GITEA_HTTP_BIND=127.0.0.1
HOP_HTTP_BIND=127.0.0.1
GITEA_SSH_BIND=127.0.0.1
GITEA_DISABLE_SSH=true
GITEA_DISABLE_REGISTRATION=true
GITEA_ACTIONS_ENABLED=false
Start the services and install the Hop-native Gitea assets:
docker compose --env-file .env up --build -d
./deploy/gitea/install-hop-native.sh
The reverse proxy should forward the public hostname to the configured
GITEA_HTTP_BIND:GITEA_HTTP_PORT, preserve the Host header, and set
X-Forwarded-Proto to https. Persistent repository and database data live in
the named Compose volumes.