diff --git a/monitoring/docker-compose.yml b/monitoring/docker-compose.yml
index 9a750f73..c7b968da 100644
--- a/monitoring/docker-compose.yml
+++ b/monitoring/docker-compose.yml
@@ -194,6 +194,27 @@ services:
             - xavia_db
         networks:
             - monitoring_net
+    # ─── Gitea ────────────────────────────────────────────────
+    gitea:
+        image: gitea/gitea:latest
+        container_name: gitea
+        restart: unless-stopped
+        environment:
+            - USER_UID=1000
+            - USER_GID=1000
+            - GITEA__database__DB_TYPE=sqlite3
+            - GITEA__server__DOMAIN=${GITEA_DOMAIN:-gitea.uber-stup.club}
+            - GITEA__server__ROOT_URL=https://${GITEA_DOMAIN:-gitea.uber-stup.club}
+            - GITEA__server__HTTP_PORT=3000
+            - GITEA__service__DISABLE_REGISTRATION=${GITEA_DISABLE_REGISTRATION:-true}
+            - GITEA__service__REQUIRE_SIGNIN_VIEW=true
+            - GITEA__security__SECRET_KEY=${GITEA_SECRET_KEY}
+            - GITEA__security__INTERNAL_TOKEN=${GITEA_INTERNAL_TOKEN}
+        volumes:
+            - gitea_data:/data
+        networks:
+            - monitoring_net
+
 networks:
     monitoring_net:
         driver: bridge
@@ -216,3 +237,5 @@ volumes:
     filebeat_var:
     wazuh_indexer_data:
     nginx_logs:
+    # Gitea
+    gitea_data:
diff --git a/monitoring/nginx/nginx.conf b/monitoring/nginx/nginx.conf
index 3a847a36..0fb39eb0 100644
--- a/monitoring/nginx/nginx.conf
+++ b/monitoring/nginx/nginx.conf
@@ -117,6 +117,31 @@ http {
         }
     }
 
+    # ── Gitea ───────────────────────────────────────────────
+    server {
+        listen 443 ssl;
+        server_name gitea.uber-stup.club;
+
+        ssl_certificate     /etc/nginx/certs/fullchain.pem;
+        ssl_certificate_key /etc/nginx/certs/privkey.pem;
+        ssl_protocols       TLSv1.2 TLSv1.3;
+        ssl_ciphers         HIGH:!aNULL:!MD5;
+
+        access_log /var/log/nginx/gitea_access.log;
+        error_log  /var/log/nginx/gitea_error.log;
+
+        location / {
+            proxy_pass         http://gitea:3000;
+            proxy_http_version 1.1;
+            proxy_set_header   Host $host;
+            proxy_set_header   X-Real-IP $remote_addr;
+            proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header   X-Forwarded-Proto $scheme;
+            proxy_read_timeout 300s;
+            client_max_body_size 100m;
+        }
+    }
+
     # ── Wazuh Dashboard ─────────────────────────────────────
     server {
         listen 443 ssl;