version: '3.7'

volumes:
  #SSL
  certs:
  acme:
#  vhost.d:
  html:
  #NextCloud
  nc-data:
  nc-userdata:
  nc-apps:
  db-data:

networks:
  proxy-tier:

services:
# ============ NextCloud
  nextcloud:
    build: ./images/nc
    restart: always
    expose:
      - 80
    volumes:
      - nc-data:/var/www/html
      - nc-userdata:/var/www/html/data
      - nc-apps:/var/www/html/apps
    environment:
      - VIRTUAL_HOST=palta.cyou
      - LETSENCRYPT_HOST=palta.cyou
      - APACHE_DISABLE_REWRITE_IP=1
      - TRUSTED_PROXIES=palta.cyou
      - TRUSTED_DOMAINS=palta.cyou,bard.palta.cyou
      - OVERWRITEPROTOCOL=https
      - NEXTCLOUD_ADMIN_USER=Super
      - "NEXTCLOUD_ADMIN_PASSWORD=&3Qv%CQCGp>zs-!f"
      - OBJECTSTORE_S3_HOST=s3.us-west-001.backblazeb2.com
      - OBJECTSTORE_S3_BUCKET=paltas
      - OBJECTSTORE_S3_KEY=001602c9b6d6e420000000001
      - OBJECTSTORE_S3_SECRET=K001WXz69MkRgVKk+7DP4mwbZYXe2fQ
      - OBJECTSTORE_S3_PORT=443
      - OBJECTSTORE_S3_SSL=true
      - OBJECTSTORE_S3_REGION=us-west-001
      - OBJECTSTORE_S3_USEPATH_STYLE=true
      - POSTGRES_HOST=db
      - REDIS_HOST=redis
    env_file:
      - db.env
    networks:
      - default
      - proxy-tier
    depends_on:
      - reverse_proxy
      - db
      - redis

  nextcloud-janitor:
    build: ./images/nc
    restart: always
    volumes:
      - nc-data:/var/www/html
      - nc-userdata:/var/www/html/data
      - nc-apps:/var/www/html/apps
    entrypoint: /cron.sh
    depends_on:
      - db
      - redis

# =========== SSL

  reverse_proxy:
    image: docker.io/nginxproxy/nginx-proxy:alpine
    restart: always
    labels:
      com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy: "true"
    volumes:
     - certs:/etc/nginx/certs:ro
     - ./vhost.d/:/etc/nginx/vhost.d:ro
     - html:/usr/share/nginx/html
     - /var/run/docker.sock:/tmp/docker.sock:ro
    ports:
     - 80:80
     - 443:443
    networks:
     - proxy-tier

  letsencrypt-companion:
    image: docker.io/nginxproxy/acme-companion
    restart: always
    volumes:
     - certs:/etc/nginx/certs
     - acme:/etc/acme.sh
     - ./vhost.d:/etc/nginx/vhost.d
     - html:/usr/share/nginx/html
     - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
     - proxy-tier
    depends_on:
     - reverse_proxy
    environment:
    #- ACME_CA_URI=https://acme-staging-v02.api.letsencrypt.org/directory # test-server
     - DEFAULT_EMAIL=admin@uwu.email

  db:
#    container_name: db
    image: postgres:14-alpine
    restart: always
    ports:
      -  "5432:5432"
    volumes:
      - db-data:/var/lib/postgresql/data
    env_file:
      - db.env
    shm_size: 256MB

  redis:
    image: redis:alpine
    restart: always