diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..8254f17
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,57 @@
+---
+version: '3.5'
+services:
+  git:
+    image: registry.karinthy.hu/kfg/gitea:${GITEA_VERSION}
+    container_name: git
+    environment:
+      - USER_UID
+      - USER_GID
+      - APP_NAME
+      - RUN_MODE
+      - DISABLE_REGISTRATION
+      - DISABLE_SSH
+      - SSH_PORT
+      - SSH_LISTEN_PORT
+      - GITEA__security__SECRET_KEY
+      - GITEA__server__DOMAIN
+      - GITEA__server__PROTOCOL
+      - GITEA__server__HTTP_PORT
+      - GITEA__server__ROOT_URL
+      - GITEA__server__CERT_FILE
+      - GITEA__server__KEY_FILE
+      - GITEA__server__DISABLE_SSH
+      - GITEA__server__START_SSH_SERVER
+      - GITEA__server__SSH_PORT
+      - GITEA__server__SSH_LISTEN_PORT
+      - GITEA__server__OFFLINE_MODE
+      - GITEA__database__DB_TYPE
+      - GITEA__database__HOST
+      - GITEA__database__NAME
+      - GITEA__database__USER
+      - GITEA__database__PASSWD
+      - GITEA__metrics__ENABLED
+      - GITEA__service__DISABLE_REGISTRATION
+      - GITEA__service__REQUIRE_SIGNIN_VIEW
+      - GITEA__service__REGISTER_EMAIL_CONFIRM
+      - GITEA__service__ENABLE_NOTIFY_MAIL
+      - GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION
+      - GITEA__service__ENABLE_CAPTCHA
+      - GITEA__service__DEFAULT_KEEP_EMAIL_PRIVATE
+      - GITEA__service__DEFAULT_ALLOW_CREATE_ORGANIZATION
+      - GITEA__service__DEFAULT_ENABLE_TIMETRACKING
+      - GITEA__openid__ENABLE_OPENID_SIGNIN
+      - GITEA__openid__ENABLE_OPENID_SIGNUP
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      - ${GIT_DATADIR}:/data
+      - /admin/src/docker-git/ssl:/data/gitea/ssl:ro
+    ports:
+      - "${EXTERNAL_IP}:${EXTERNAL_HTTP_PORT}:${GITEA_HTTP_PORT}"
+      - "${EXTERNAL_IP}:${EXTERNAL_SSH_PORT}:${GITEA_SSH_PORT}"
+    networks:
+      - ldap.proxy
+    restart: unless-stopped
+networks:
+  ldap.proxy:
+    name: ldap.proxy.net