# authentik | Gitea | Leantime CI/CD stack

A portainer docker compose stack for Raspberry Pi with authentik, Gitea and Leantime for local CI/CD (you are accessing it right now)

I am trying to use my vpnstack NPM portainer docker compose setup to use https for this, but failing miserably...

So far I got it working in my LAN, but https won't work.... tried but it always times out... I suspect it's the nginx it uses I had similar problems with snipeit on proxmox, but there I managed to fix it at the end, although local access was not possible anymore if I did...

steps taken:
in NPM settings, added 

proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
client_max_body_size 512M;

in the portainer editor, added

      - GITEA__server__ROOT_URL=https://${GITEA_DOMAIN}
      - GITEA__server__DOMAIN=${GITEA_DOMAIN}
      - GITEA__server__SSH_DOMAIN=${GITEA_DOMAIN}
      - GITEA__server__SSH_PORT=2022
      - GITEA__server__HTTP_PORT=3000
      - GITEA__server__PROTOCOL=http
      - GITEA__server__HTTP_ADDR=0.0.0.0
      - GITEA__server__LOCAL_ROOT_URL=http://localhost:3000/

where ${GITEA_DOMAIN} in the portainer env is set to my duckdns: JavITYourWay.duckdns.org

results: when forcing SSL in NPM timeout, so I had to not force it and revert back everything...


TO-DO: 
 - learn nginx properly to at least show Gitea via https to the world (right now only http works)
 - make authentik also NPM so I can use it outside my LAN (strech GOAL)