How to Install Gitea Git Server on NAT VPS

NATVPS.id – Gitea is an open-source Git hosting service (code repository manager) that can be accessed independent host to store and manage your own software development projects. Gitea is a lightweight Git service solution written in the Go programming language, with very efficient resource usage and an easy installation process.

This article discusses the steps for installing Gitea server on a NAT VPS using Docker Compose, along with NGINX configuration for reverse proxy. This article uses Ubuntu 22.04 as a reference, but you can use other distributions such as Debian and CentOS.

Port Forwarding Configuration

Considering we are using NAT, we need to add 2 port forwarding configurations on the Virtualizor panel (or other VPS panel according to provider), ie HTTP and HTTPS port forwarding for Gitea domains.

For example, this article will use domains git.tutorial.mdinata.my.id to access Gitea. You are free to change the domain according to your choice. Note this domain, because we will use it again in the installation process.

Don’t forget to add a DNS record that goes to your VPS’ NAT public IP, like this:

If you are confused, please read our article regarding domain forwarding here: Explanation of Domain Forwarding in NAT VPS.

Install Docker

We will use Docker and Docker Compose for spread Guide

First, Install curly using the command:

apt update && apt install curl -y

Then, run it script automatic installation of Docker by entering:

curl -fsSL get.docker.com | sh

Wait until the installation process is complete.

Install Gitea

First, create a new directory for Gitea:

mkdir /opt/gitea
cd /opt/gitea

Then, create a Docker Compose file:

apt install nano -y # Jika belum
nano docker-compose.yml

Fill in the following configuration:

networks:
  gitea:
    external: false

services:
  server:
    image: docker.gitea.com/gitea:1.25.2
    container_name: gitea
    environment:
      - USER_UID=1000
      - USER_GID=1000
      - GITEA__database__DB_TYPE=mysql
      - GITEA__database__HOST=db:3306
      - GITEA__database__NAME=gitea
      - GITEA__database__USER=gitea
      - GITEA__database__PASSWD=gitea
    restart: always
    networks:
      - gitea
    volumes:
      - ./gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "3000:3000"
      - "2222:22"
    depends_on:
      - db

  db:
    image: docker.io/library/mysql:8
    restart: always
    environment:
      - MYSQL_ROOT_PASSWORD=gitea
      - MYSQL_USER=gitea
      - MYSQL_PASSWORD=gitea
      - MYSQL_DATABASE=gitea
    networks:
      - gitea
    volumes:
      - ./mysql:/var/lib/mysql

Save the file with Ctrl-X, yThen Enter.

Finally, run Gitea:

docker compose up -d

Wait for the process spread finished. The first deployment may take a few minutes due to downloading picture Gitea , as well as configuring it from the beginning.

NGINX (Reverse Proxy) Configuration

So that we can access URLs with an HTTPS connection via domains such as https://git.tutorial.mdinata.my.idwe can use reverse proxy like NGINX.

First, install NGINX via command:

# Hapus Apache2 dan pendukungnya (biasanya terpasang secara bawaan di VPS OpenVZ)
apt purge apache2* -y

# Install NGINX
apt install nginx -y

Create a new host configuration specifically for Gitea:

nano /etc/nginx/sites-available/git

Then paste the following configuration:

# 
# Reference: 

server {
    listen 80;
    listen [::]:80;
    server_name git.tutorial.mdinata.my.id;

    location / {
        client_max_body_size 512M;
        proxy_pass 
        proxy_set_header Connection $http_connection;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

Change git.tutorial.mdinata.my.id with your domain.

Activate the configuration by:

ln -sf /etc/nginx/sites-available/git /etc/nginx/sites-enabled/

# Restart NGINX
systemctl restart nginx

Generate SSL Certificate (Let’s Encrypt)

In order for our domain to be accessible via HTTPS, we need to create an SSL certificate. We can use a free SSL certificate from Let’s Encrypt via Certbot.

Install Certbot and its NGINX plugin use the command:

apt install python3-certbot python3-certbot-nginx

So, produce certificate via Certbot with command

certbot --nginx -d git.tutorial.mdinata.my.id

Change git.tutorial.mdinata.my.id with your domain.

Gitea can currently be accessed via a secure HTTPS connection.

Accessing Gitea

Gitea can be accessed via your previous domain. Example: https://git.tutorial.mdinata.my.id.

Please fill in the configuration as desired, then click Install Gitea at the bottom.

Gitea has been installed. Happy!

Cover

That’s it for this article about the steps to install Gitea on a NAT VPS.

If you are confused or in doubt, don’t hesitate to ask in the Telegram group @IPv6Indonesia. Thank You!