docker config

docker-compose.yml

version: '3'

services:
  nginx:
    image: staticfloat/nginx-certbot
    restart: always
    ports:
      - 80:80/tcp
      - 443:443/tcp
    environment:
      - CERTBOT_EMAIL=
    volumes:
      - ./nginx/conf.d/:/etc/nginx/user.conf.d:ro
      - ./data/letsencrypt/:/etc/letsencrypt
    networks:
      - exposed

  drone-gitea:
    image: drone/drone
    restart: always
    environment:
      - DRONE_GITEA_SERVER=gitea.moonside.games
      - DRONE_GITEA_CLIENT_ID=
      - DRONE_GITEA_CLIENT_SECRET=
      - DRONE_RPC_SECRET=
      - DRONE_SERVER_HOST=drone.moonside.games
      - DRONE_SERVER_PROTO=https
    ports:
      - 8080:80
      - 8081:443
    volumes:
      - /var/lib/drone:/gitea-data
    networks:
      - exposed

networks:
  exposed:
    driver: bridge

gitea.drone.moonside.games.conf

server {
        server_name drone.moonside.games;
        allow all;
        deny all;

        listen 443 ssl;

        ssl_certificate     /etc/letsencrypt/live/drone.moonside.games/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/drone.moonside.games/privkey.pem;

        location /gitea {
                proxy_pass http://drone-gitea:8080;
                proxy_redirect off;
                proxy_buffering off;
                proxy_http_version 1.1;

                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Host $server_name;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection $http_connection;
        }
}