version: '3.7'

volumes:
  #SSL
  certs:
  acme:
#  vhost.d:
  html:
  #NextCloud
  nc-appdata:
  nc-userdata:
  nc-apps:

networks:
  proxy-tier:

services:
# ============ NextCloud
  nextcloud:
    image: nextcloud
    restart: always
    expose:
      - 80
    volumes:
      - nc-appdata:/var/www/html
      - nc-userdata:/var/www/html/data
      - nc-apps:/var/www/html/apps
    environment:
      - VIRTUAL_HOST=palta.cyou
      - LETSENCRYPT_HOST=palta.cyou
      - APACHE_DISABLE_REWRITE_IP=1
      - TRUSTED_PROXIES=palta.cyou
      - TRUSTED_DOMAINS=palta.cyou,bard.palta.cyou
      - OVERWRITEPROTOCOL=https
      - NEXTCLOUD_ADMIN_USER=Super
      - "NEXTCLOUD_ADMIN_PASSWORD=&3Qv%CQCGp>zs-!f"
      - OBJECTSTORE_S3_HOST=axkurj1fnll3.compat.objectstorage.sa-santiago-1.oraclecloud.com
      - OBJECTSTORE_S3_BUCKET=palta.cyou-nextcloud-standard-1
      - OBJECTSTORE_S3_KEY=40b34022e06916f8c1ce17cd3dc93438465feb00
      - OBJECTSTORE_S3_SECRET=uZDPc7J6oic5p3S0BWBJm0YojLtDsL+Ukjh8MdSCxNs=
      - OBJECTSTORE_S3_PORT=443
      - OBJECTSTORE_S3_SSL=true
      - OBJECTSTORE_S3_REGION=sa-santiago-1
      - OBJECTSTORE_S3_USEPATH_STYLE=true
    networks:
      - default
      - proxy-tier

  nextcloud-janitor:
    image: nextcloud
    restart: always
    volumes:
      - nc-appdata:/var/www/html
    entrypoint: /cron.sh
#    depends_on:

# =========== SSL

  reverse_proxy:
    image: docker.io/nginxproxy/nginx-proxy:alpine
    restart: always
    labels:
      com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy: "true"
    volumes:
     - certs:/etc/nginx/certs:ro
     - ./vhost.d/:/etc/nginx/vhost.d:ro
     - html:/usr/share/nginx/html
     - /var/run/docker.sock:/tmp/docker.sock:ro
    ports:
     - 80:80
     - 443:443
    networks:
     - proxy-tier

  letsencrypt-companion:
    image: docker.io/nginxproxy/acme-companion
    restart: always
    volumes:
     - certs:/etc/nginx/certs
     - acme:/etc/acme.sh
     - ./vhost.d:/etc/nginx/vhost.d:ro
     - html:/usr/share/nginx/html
     - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
     - proxy-tier
    depends_on:
     - reverse_proxy
    environment:
    #- ACME_CA_URI=https://acme-staging-v02.api.letsencrypt.org/directory # test-server
     - DEFAULT_EMAIL=admin@uwu.email