---
networks:

  share:
    external: true
  local:
    internal: false
  gitea:
    internal: true
  passb:
    internal: true

volumes:

  swags-config:
  whgle-config:
  gitea-data:
  gitea-db:
  passb-gpg:
  passb-jwt:
  passb-db:
  onlyo-ds-log:
  onlyo-ds-lib:
  onlyo-ds-www:
  onlyo-ds-pg:
  onlyo-ds-rb:
  onlyo-ds-rd:
  onlyo-ds-font:

services:

  swags:
    image: andrew/swag:1.31.0
    build:
      context: https://cor.cherished.me/gt/andrew/build-swag.git
    restart: always
    environment:
      - PUID=1000
      - PGID=2000
      - TZ=Australia/Perth
      - URL=cherished.me
      - VALIDATION=http
      - SUBDOMAINS=ubu1,ods
      - CERTPROVIDER=
      - DNSPLUGIN=
      - PROPAGATION=
      - EMAIL=
      - ONLY_SUBDOMAINS=true
      - EXTRA_DOMAINS=
      - STAGING=false
    volumes:
      - ${BIND?err}swags-config:/config
      - ${CERT?err}cor.cherished.me.chained.crt:/defaults/custom-cert.crt:ro
      - ${CERT?err}cor.cherished.me.key:/defaults/custom-cert.key:ro
      - ${CONF?err}ggrav.subfolder.conf:/config/nginx/proxy-confs/ggrav.subfolder.conf:ro
      - ${CONF?err}gitea.subfolder.conf:/config/nginx/proxy-confs/gitea.subfolder.conf:ro
      - ${CONF?err}passb.subfolder.conf:/config/nginx/proxy-confs/passb.subfolder.conf:ro
      - ${CONF?err}whgle.subfolder.conf:/config/nginx/proxy-confs/whgle.subfolder.conf:ro
      - ${CONF?err}swags-index.html:/config/www/index.html:ro
    ports:
      - "80:80"
      - "443:443"
    networks:
      - local
      - share

  whgle:
    image: docker.io/benbusby/whoogle-search:0.7.4
    restart: always
    environment:
      - WHOOGLE_URL_PREFIX=/wg
    volumes:
      - ${BIND?err}whgle-config:/config
    networks:
      - local

  gitea:
    image: docker.io/gitea/gitea:1.16.9
    restart: always
    volumes:
      - ${BIND?err}gitea-data:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    env_file:
      - ${CONF?err}gitea.env
    depends_on:
      - gitea-db
    networks:
      - local
      - gitea

  gitea-db:
    image: docker.io/mariadb:10.8
    restart: always
    volumes:
      - ${BIND?err}gitea-db:/var/lib/mysql
    env_file:
      - ${CONF?err}gitea-db.env
    healthcheck:
      test: ["CMD-SHELL","/usr/bin/mysql -hlocalhost -p$$MARIADB_ROOT_PASSWORD --execute=\"use gtdb;\""]
      interval: 20s
      timeout: 5s
      retries: 5
    networks:
      - gitea

  passb:
    image: docker.io/passbolt/passbolt:3.7.2-1-ce
    restart: always
    volumes:
      - ${BIND?err}passb-gpg:/etc/passbolt/gpg
      - ${BIND?err}passb-jwt:/etc/passbolt/jwt
    env_file:
      - ${CONF?err}passb.env
    depends_on:
      - passb-db
    command: ["/usr/bin/wait-for.sh", "-t", "0", "passb-db:3306", "--", "/docker-entrypoint.sh"]
    networks:
      - local
      - passb

  passb-db:
    image: docker.io/mariadb:10.8
    restart: always
    volumes:
      - ${BIND?err}passb-db:/var/lib/mysql
    env_file:
      - ${CONF?err}passb-db.env
    healthcheck:
      test: ["CMD-SHELL","/usr/bin/mysql -hlocalhost -p$$MARIADB_ROOT_PASSWORD --execute=\"use pbdb;\""]
      interval: 20s
      timeout: 5s
      retries: 5
    networks:
      - passb

  onlyo-ds:
    image: docker.io/onlyoffice/documentserver:7.1
    restart: always
    ports:
      - "9443:443"
    volumes:
      - ${CONF?err}onlyo-ds.crt:/onlyo-ds.crt:ro
      - ${CONF?err}onlyo-ds.key:/onlyo-ds.key:ro
      - ${BIND?err}onlyo-ds-log:/var/log/onlyoffice
      - ${BIND?err}onlyo-ds-lib:/var/lib/onlyoffice
      - ${BIND?err}onlyo-ds-www:/var/www/onlyoffice/Data
      - ${BIND?err}onlyo-ds-pg:/var/lib/postgresql
      - ${BIND?err}onlyo-ds-rb:/var/lib/rabbitmq
      - ${BIND?err}onlyo-ds-rd:/var/lib/redis
      - ${BIND?err}onlyo-ds-font:/usr/share/fonts/truetype/custom
    environment:
      - ONLYOFFICE_HTTPS_HSTS_ENABLED=true
      - ONLYOFFICE_HTTPS_HSTS_MAXAGE=
      - SSL_CERTIFICATE_PATH=/onlyo-ds.crt
      - SSL_KEY_PATH=/onlyo-ds.key
      - SSL_DHPARAM_PATH=
      - SSL_VERIFY_CLIENT=
      - DB_TYPE=
      - DB_HOST=
      - DB_PORT=
      - DB_NAME=
      - DB_USER=
      - DB_PWD=
      - AMQP_URI=
      - AMQP_TYPE=
      - REDIS_SERVER_HOST=
      - REDIS_SERVER_PORT=
      - NGINX_WORKER_PROCESSES=
      - NGINX_WORKER_CONNECTIONS=
      - JWT_ENABLED=
      - JWT_SECRET=
      - JWT_HEADER=
      - JWT_IN_BODY=
      - USE_UNAUTHORIZED_STORAGE=
      - GENERATE_FONTS=
      - METRICS_ENABLED=
      - METRICS_HOST=
      - METRICS_PORT=
      - METRICS_PREFIX=
      - LETS_ENCRYPT_DOMAIN=
      - LETS_ENCRYPT_MAIL=
    networks:
      - local