Gitea Deployment auf Proxmox - Vollstaendige Dokumentation

- docker-compose.yml aktualisiert fuer Proxmox Bare Metal
  - Security-Optionen (apparmor/seccomp)
  - Health-Check
  - Resource Limits
  - ROOT_URL fuer externen Zugriff via DuckDNS
- README.md mit Architektur und Quick Start
- TROUBLESHOOTING.md mit Problemloesungen
- nginx-gitea.conf fuer VPS Reverse Proxy

Deployment: https://eckardt-vault.duckdns.org/git/

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

docker/docker-compose.yml

@@ -1,31 +1,47 @@
-version: "3"
+version: "3.8"
 
 services:
   gitea:
     image: gitea/gitea:latest
     container_name: gitea
+    restart: unless-stopped
+    security_opt:
+      - apparmor=unconfined
+      - seccomp=unconfined
     environment:
       - USER_UID=1000
       - USER_GID=1000
       - GITEA__database__DB_TYPE=sqlite3
-      - GITEA__server__ROOT_URL=http://git.local:3000/
-      - GITEA__server__SSH_DOMAIN=git.local
+      - GITEA__server__ROOT_URL=https://eckardt-vault.duckdns.org/git/
+      - GITEA__server__SSH_DOMAIN=192.168.178.111
       - GITEA__server__SSH_PORT=2222
+      - GITEA__server__LFS_START_SERVER=true
+      - GITEA__repository__DEFAULT_BRANCH=main
     volumes:
-      - gitea-data:/data
+      - /opt/docker/gitea:/data
       - /etc/timezone:/etc/timezone:ro
       - /etc/localtime:/etc/localtime:ro
     ports:
       - "3000:3000"   # Web UI
       - "2222:22"     # Git SSH
-    restart: unless-stopped
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:3000/api/healthz"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+    deploy:
+      resources:
+        limits:
+          cpus: '2.0'
+          memory: 1G
+    logging:
+      driver: "json-file"
+      options:
+        max-size: "10m"
+        max-file: "3"
     networks:
       - gitea-net
 
 networks:
   gitea-net:
     driver: bridge
-
-volumes:
-  gitea-data:
-    driver: local