version: '3.7'

volumes:
  nextcloud-db:
    name: docker_nextcloud-db
  nextcloud:
    name: docker_nextcloud

networks:
  nextcloud:
  proxy:
    external: true

services:
  nextcloud-app:
    image: nextcloud:23.0
    container_name: nextcloud-app
    restart: unless-stopped
    volumes:
      - nextcloud:/var/www/html
    environment:
      - "TZ=Europe/Paris"
      - REDIS_HOST=redis
    env_file: ./secrets/librezo.secrets
    depends_on:
      - nextcloud-db
      - redis
    networks:
      - nextcloud
      - proxy
    restart: unless-stopped
    labels:
      traefik.http.routers.nextcloud-web.entrypoints: websecure
      traefik.http.routers.nextcloud-web.rule: Host(`cloud.oasis21.org`)
      traefik.http.services.nextcloud-web.loadbalancer.server.port: 80
      traefik.enable: true
      # https://docs.nextcloud.com/server/16/admin_manual/configuration_server/reverse_proxy_configuration.html
      traefik.http.routers.nextcloud-web.middlewares: nextcloud-web@docker
      traefik.http.middlewares.nextcloud-web.redirectregex.permanent: true
      traefik.http.middlewares.nextcloud-web.redirectregex.regex: ^/.well-known/(card|cal)dav
      traefik.http.middlewares.nextcloud-web.redirectregex.replacement: /remote.php/dav/
    restart: unless-stopped

  redis:
    image: redis
    image: 'bitnami/redis:latest'
    container_name: redis
    environment:
      - "TZ=Europe/Paris"
      - ALLOW_EMPTY_PASSWORD=yes
    env_file: ./secrets/librezo.secrets
    networks:
      - nextcloud


  nextcloud-db:
    image: postgres:11
    container_name: nextcloud-db
    volumes:
      - nextcloud-db:/var/lib/postgresql/data
    networks:
      - nextcloud
    env_file: ./secrets/librezo.secrets
    environment:
      - "TZ=Europe/Paris"
    restart: unless-stopped

  collabora:
    image: libreoffice/online:master
    container_name: collabora
    volumes:
      - ./loolwsd.xml:/etc/loolwsd/loolwsd.xml
    environment:
      - "TZ=Europe/Paris"
      - domain=cloud\.calad\.re
      - serveur_name=code\.calad\.re
      - "extra_params=--o:ssl.enable=false --o:ssl.termination=true"
    networks:
      - nextcloud
      - proxy
    env_file: ./secrets/librezo.secrets
    cap_add:
      - MKNOD
    restart:
      unless-stopped
    labels:
      traefik.http.routers.collabora.entrypoints: websecure
      traefik.http.routers.collabora.rule: Host(`code.oasis21.org`)
      traefik.http.services.collabora.loadbalancer.server.port: 9980
      traefik.enable: true