131 lines
3.5 KiB
YAML
131 lines
3.5 KiB
YAML
services:
|
|
# Note: PostgreSQL is an external service. You can find more information about the configuration here:
|
|
# https://hub.docker.com/_/postgres
|
|
db:
|
|
# Note: Check the recommend version here: https://docs.nextcloud.com/server/latest/admin_manual/installation/system_requirements.html#server
|
|
image: postgres:alpine
|
|
restart: always
|
|
volumes:
|
|
- db:/var/lib/postgresql/data:Z
|
|
env_file:
|
|
- db.env
|
|
|
|
# Note: Redis is an external service. You can find more information about the configuration here:
|
|
# https://hub.docker.com/_/redis
|
|
redis:
|
|
image: redis:alpine
|
|
restart: always
|
|
|
|
app:
|
|
image: nextcloud:apache
|
|
restart: always
|
|
volumes:
|
|
- nextcloud:/var/www/html:z
|
|
# NOTE: The `volumes` config of the `cron` and `app` containers must match
|
|
environment:
|
|
- VIRTUAL_HOST=
|
|
- LETSENCRYPT_HOST=
|
|
- LETSENCRYPT_EMAIL=
|
|
- POSTGRES_HOST=db
|
|
- REDIS_HOST=redis
|
|
env_file:
|
|
- db.env
|
|
depends_on:
|
|
- db
|
|
- redis
|
|
- proxy
|
|
networks:
|
|
- proxy-tier
|
|
- default
|
|
|
|
cron:
|
|
image: nextcloud:apache
|
|
restart: always
|
|
volumes:
|
|
- nextcloud:/var/www/html:z
|
|
# NOTE: The `volumes` config of the `cron` and `app` containers must match
|
|
entrypoint: /cron.sh
|
|
depends_on:
|
|
- db
|
|
- redis
|
|
|
|
# Note: Nginx-proxy is an external service. You can find more information about the configuration here:
|
|
# Warning: Do not use :latest tags of nginx-proxy unless absolutely sure about the consequences.
|
|
# https://hub.docker.com/r/nginxproxy/nginx-proxy
|
|
proxy:
|
|
build: ./proxy
|
|
restart: always
|
|
ports:
|
|
- 80:80
|
|
- 443:443
|
|
labels:
|
|
- "com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy"
|
|
volumes:
|
|
- certs:/etc/nginx/certs:ro,z
|
|
- vhost.d:/etc/nginx/vhost.d:z
|
|
- html:/usr/share/nginx/html:z
|
|
- /var/run/docker.sock:/tmp/docker.sock:z,ro
|
|
networks:
|
|
- proxy-tier
|
|
|
|
# Note: Letsencrypt companion is an external service. You can find more information about the configuration here:
|
|
# https://hub.docker.com/r/nginxproxy/acme-companion
|
|
letsencrypt-companion:
|
|
image: nginxproxy/acme-companion
|
|
restart: always
|
|
volumes:
|
|
- certs:/etc/nginx/certs:z
|
|
- acme:/etc/acme.sh:z
|
|
- vhost.d:/etc/nginx/vhost.d:z
|
|
- html:/usr/share/nginx/html:z
|
|
- /var/run/docker.sock:/var/run/docker.sock:z,ro
|
|
networks:
|
|
- proxy-tier
|
|
depends_on:
|
|
- proxy
|
|
|
|
# self signed, outdated
|
|
# omgwtfssl:
|
|
# image: paulczar/omgwtfssl
|
|
# restart: "no"
|
|
# volumes:
|
|
# - certs:/certs
|
|
# environment:
|
|
# - SSL_SUBJECT=servhostname.local
|
|
# - CA_SUBJECT=my@example.com
|
|
# - SSL_KEY=/certs/servhostname.local.key
|
|
# - SSL_CSR=/certs/servhostname.local.csr
|
|
# - SSL_CERT=/certs/servhostname.local.crt
|
|
# networks:
|
|
# - proxy-tier
|
|
|
|
#Self-signed Certificate Generator (Replaces omgwtfssl)
|
|
cert-generator:
|
|
image: frapsoft/openssl
|
|
container_name: cert-generator-postgres-fpm
|
|
command: >
|
|
sh -c "
|
|
openssl req -x509 -nodes -days 365 -newkey rsa:2048
|
|
-keyout /certs/servhostname.local.key
|
|
-out /certs/servhostname.local.crt
|
|
-subj '/CN=servhostname.local/O=MyOrg/C=US'
|
|
&& openssl req -new -key /certs/servhostname.local.key
|
|
-out /certs/servhostname.local.csr
|
|
-subj '/CN=servhostname.local/O=MyOrg/C=US'"
|
|
volumes:
|
|
- certs:/certs
|
|
restart: "no"
|
|
networks:
|
|
- proxy-tier
|
|
|
|
volumes:
|
|
db:
|
|
nextcloud:
|
|
certs:
|
|
acme:
|
|
vhost.d:
|
|
html:
|
|
|
|
networks:
|
|
proxy-tier:
|