diff --git a/services/gitea.hcl b/services/gitea.hcl
new file mode 100644
index 0000000..72af3c5
--- /dev/null
+++ b/services/gitea.hcl
@@ -0,0 +1,55 @@
+job "gitea" {
+  datacenters = ["alo"]
+
+  group "web" {
+    network {
+      port "http" {
+        to = 3000
+      }
+      port "ssh" {
+        static = 2222
+      }
+    }
+
+    task "server" {
+      driver = "docker"
+
+      config {
+        image = "gitea/gitea:latest-rootless"
+        ports = [
+          "http",
+          "ssh",
+        ]
+        volumes = [
+          "/data/compute/appdata/gitea/data:/var/lib/gitea",
+          "/data/compute/appdata/gitea/config:/etc/gitea",
+          "/etc/timezone:/etc/timezone:ro",
+          "/etc/localtime:/etc/localtime:ro",
+        ]
+      }
+
+      env {
+        GITEA__database__DB_TYPE = "postgres"
+        GITEA__database__HOST = "postgres.service.consul:5432"
+        GITEA__database__NAME = "gitea"
+        GITEA__database__USER = "gitea"
+        GITEA__database__PASSWD = "thu3AhkeisoohaeXuKee"
+        GITEA__mailer__ENABLED = "true"
+        GITEA__mailer__FROM = "gitea@paler.net"
+        GITEA__mailer__PROTOCOL = "smtp"
+        GITEA__mailer__SMTP_ADDR = "192.168.1.1"
+      }
+
+      service {
+        name = "gitea"
+        port = "http"
+
+        tags = [
+          "traefik.enable=true",
+          "traefik.http.routers.gitea.entryPoints=websecure",
+          "traefik.http.routers.gitea.middlewares=authentik@file",
+        ]
+      }
+    }
+  }
+}