diff --git a/monitoring/s3/docker-compose-s3.yml b/monitoring/s3/docker-compose-s3.yml
index a9fcb30a..ff7a3195 100644
--- a/monitoring/s3/docker-compose-s3.yml
+++ b/monitoring/s3/docker-compose-s3.yml
@@ -13,6 +13,7 @@ services:
         depends_on:
             - rustfs
             - xavia
+            - gitea
         networks:
             - s3_net
 
@@ -79,6 +80,19 @@ services:
             - xavia_db
         networks:
             - s3_net
+    gitea:
+        image: docker.gitea.com/gitea:latest
+        container_name: gitea
+        environment:
+            - USER_UID=1000
+            - USER_GID=1000
+        restart: always
+        volumes:
+            - gitea:/data
+            - /etc/timezone:/etc/timezone:ro
+            - /etc/localtime:/etc/localtime:ro
+        networks:
+            - s3_net
 
     dozzle-agent:
         image: amir20/dozzle:latest
@@ -97,3 +111,4 @@ volumes:
     nginx_logs:
     xavia_db_data:
     xavia_blobs:
+    gitea:
diff --git a/monitoring/s3/nginx/nginx.conf b/monitoring/s3/nginx/nginx.conf
index 11f90cec..8bc0e127 100644
--- a/monitoring/s3/nginx/nginx.conf
+++ b/monitoring/s3/nginx/nginx.conf
@@ -95,4 +95,31 @@ http {
             client_max_body_size 500m;
         }
     }
+
+    server {
+        listen 443 ssl;
+        server_name gitea.uber-stup.club;
+
+        ssl_certificate     /etc/nginx/certs/fullchain.pem;
+        ssl_certificate_key /etc/nginx/certs/privkey.pem;
+        ssl_protocols       TLSv1.2 TLSv1.3;
+        ssl_ciphers         HIGH:!aNULL:!MD5;
+
+        access_log /var/log/nginx/gitea_access.log;
+        error_log  /var/log/nginx/gitea_error.log;
+
+        location / {
+            set $upstream http://gitea:3000;
+            proxy_pass         $upstream;
+            proxy_http_version 1.1;
+            proxy_set_header   Host $host;
+            proxy_set_header   X-Real-IP $remote_addr;
+            proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header   X-Forwarded-Proto $scheme;
+            proxy_set_header   Upgrade $http_upgrade;
+            proxy_set_header   Connection "upgrade";
+            proxy_read_timeout 300s;
+            client_max_body_size 500m;
+        }
+    }
 }