name: reverse

volumes:
  certs:
  acme:
  html:

networks:
  proxy-tier:

services:
# proxy
  reverse_proxy:
    build: ./images/proxy
    restart: always
    labels:
      com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy: "true"
    volumes:
     - certs:/etc/nginx/certs:ro
     - ./vhost.d/:/etc/nginx/vhost.d:ro
     - html:/usr/share/nginx/html
     - /var/run/docker.sock:/tmp/docker.sock:ro
    ports:
     - 80:80
     - 443:443
    networks:
     - proxy-tier
    environment:
     - ENABLE_IPV6=true
     - SHA1_UPSTREAM_NAME=true
     - TRUST_DOWNSTREAM_PROXY=false
     - RESOLVERS=8.8.8.8 8.8.4.4 [2001:4860:4860::8888] [2001:4860:4860::8844] valid=300s ipv6=on

# letsencrypt agent
  letsencrypt-companion:
    image: docker.io/nginxproxy/acme-companion
    restart: always
    volumes:
     - certs:/etc/nginx/certs
     - acme:/etc/acme.sh
     - ./vhost.d:/etc/nginx/vhost.d
     - html:/usr/share/nginx/html
     - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
     - proxy-tier
    depends_on:
     - reverse_proxy
    environment:
     - DEFAULT_EMAIL=${ADMIN_EMAIL}