Why this Configuration?
- True Data Sovereignty: 100% GDPR-compliant on-premises deployment. You own your configuration and data without vendor lock-in.
- Hardware Agnostic: Optimized and verified across low-power ARM64 SBCs (Raspberry Pi 5) and x86_64 hypervisors (Proxmox VE LXC & VM).
- Engine Freedom: Tested and supported under standard Docker Engine and unprivileged rootless Podman.
- Platform Verification: Tested on Proxmox LXC: docker (24.04, 2026-09-18), podman (24.04, 2026-09-14); Proxmox VM: docker (24.04, 2026-09-14), podman (24.04, 2026-09-14).
Quick Start (Standalone Docker Compose)
The snippet below is immediately ready to run in any standard Docker or Podman environment:
services:
gitlab:
image: 'gitlab/gitlab-ce:latest' # 'ce' stands for Community Edition, the free version.
container_name: njorddeploy-gitlab
restart: unless-stopped
hostname: 'gitlab.local' # GitLab needs a hostname to configure itself correctly.
environment:
GITLAB_OMNIBUS_CONFIG: "from_file('/etc/gitlab/gitlab.rb')"
ports:
- "10080:80" # Web UI (HTTP)
- "10443:443" # Web UI (HTTPS)
- "10022:22" # Git over SSH
volumes:
- 'data_root/gitlab/config/gitlab.rb:/etc/gitlab/gitlab.rb'
- 'data_root/gitlab/config:/etc/gitlab'
- 'data_root/gitlab/logs:/var/log/gitlab'
- 'data_root/gitlab/data:/var/opt/gitlab'
shm_size: '256m' # Recommended to prevent issues with the built-in PostgreSQL.
networks:
- njorddeploy_net
networks:
njorddeploy_net:
Start the service directly via the command line: docker compose up -d
Configuration & Environment Variables
Key configuration parameters and defaults derived from the NjordDeploy component template:
| Variable | Default Value | Description |
|---|---|---|
|
10080 |
HTTP port to access the GitLab web interface. |
|
10443 |
HTTPS port to access the GitLab web interface. |
|
10022 |
SSH port for Git over SSH. |
Ecosystem & Enterprise Integration
- Reverse Proxy Ingress Ready: Pre-configured for Caddy, Traefik, or Nginx Proxy Manager with automatic Let's Encrypt TLS certificates.
- Zero-Trust Mesh VPN: Seamless integration with WireGuard or Tailscale/Headscale mesh networks for secure remote administration.
- Transactional State Backups: Ready for point-in-time database dumps and container-safe persistent volume freezing.
Effortless Management with NjordDeploy
Deploy, monitor, and update this service with a single click on your own hardware via the NjordDeploy Configurator.