docker-compose.yml

version: '3'


services:

  db:
    container_name: nextcloud-mariadb
    build: ./db
    command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
    environment:
      - MYSQL_DATABASE=nextcloud
    env_file:
      - ./env/db.env
    restart: always
    tmpfs:
      - /tmp:size=256M
    volumes:
      - db:/var/lib/mysql

  redis:
    container_name: nextcloud-redis
    image: redis:alpine
    restart: always
    tmpfs:
      - /data:size=64M

  postfix:
    container_name: nextcloud-postfix
    env_file:
      - ./env/smtp.env
    image: catatnight/postfix
    restart: always
    volumes:
      - mail:/var/spool/postfix

  app:
    container_name: nextcloud-app
    build: ./app
    depends_on:
      - db
      - redis
    environment:
      # database
      - MYSQL_DATABASE=nextcloud
      - MYSQL_HOST=db
      # redis
      - REDIS_HOST=redis
      # smtp
      - SMTP_AUTHTYPE=LOGIN
      - SMTP_HOST=postfix
      - SMTP_PORT=25
    env_file:
      - ./env/db.env
      - ./env/proxy.env
      - ./env/smtp.env
    restart: always
    volumes:
      - nextcloud:/var/www/html

  cron:
    container_name: nextcloud-cron
    build: ./app/cron
    depends_on:
      - db
      - redis
    entrypoint: /cron.sh
    restart: always
    volumes:
      - nextcloud:/var/www/html

  web:
    container_name: nextcloud-nginx
    build: ./web
    depends_on:
      - app
    env_file:
      - ./env/proxy.env
    networks:
      - proxy-net
      - default
    restart: always
    volumes:
      - nextcloud:/var/www/html:ro

  proxy:
    container_name: nextcloud-proxy
    build: ./proxy
    #depends_on:
    #  - omgwtfssl
    labels:
      com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy: "true"
    networks:
      - proxy-net
    ports:
      - "80:80"
      - "443:443"
    restart: always
    volumes:
      - certs:/etc/nginx/certs:ro
      - vhost.d:/etc/nginx/vhost.d
      - html:/usr/share/nginx/html
      - /var/run/docker.sock:/tmp/docker.sock:ro

  omgwtfssl:
    container_name: nextcloud-ssl
    entrypoint: ["echo", "service omgwtfssl disabled"]
    env_file:
      - ./env/proxy.env
    image: paulczar/omgwtfssl
    networks:
      - proxy-net
    restart: "no"
    volumes:
      - certs:/certs

  letsencrypt-companion:
    container_name: nextcloud-letsencrypt
    depends_on:
      - proxy
    image: jrcs/letsencrypt-nginx-proxy-companion
    networks:
      - proxy-net
    restart: always
    volumes:
      - certs:/etc/nginx/certs
      - vhost.d:/etc/nginx/vhost.d
      - html:/usr/share/nginx/html
      - /var/run/docker.sock:/var/run/docker.sock:ro

  coturn:
    container_name: nextcloud-coturn
    build:
      context: ./turn
      dockerfile: Dockerfile
    env_file:
      - ./env/turn.env
    networks:
      - turn-net
    ports:
      - "3478:3478/tcp"
      - "3478:3478/udp"
      - "49160-49200:49160-49200/udp"
    restart: always
    tmpfs:
      - /var/lib/coturn:size=512M


volumes:

  # database volume
  db:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /var/pool/nextcloud/db

  # postfix mails
  mail:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /var/pool/nextcloud/mail

  # nextcloud data volume
  nextcloud:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /var/pool/nextcloud/data

  certs:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /var/pool/nextcloud/certs

  vhost.d:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /var/pool/nextcloud/vhost

  html:
    driver: local
    driver_opts:
      type: none
      o: bind
      device: /var/pool/nextcloud/html


networks:
  proxy-net:
  turn-net: