services:
  nextcloud-db:
    image: mariadb:10.11
    container_name: nextcloud-db
    command: --transaction-isolation=READ-COMMITTED --innodb_read_only_compressed=OFF
    restart: unless-stopped
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
      - ./mysql_database:/var/lib/mysql
    environment:
      - MYSQL_ROOT_PASSWORD=8hANayfptc2RRvVZw2TYPP_d #SQL root Passwort eingeben
      - MYSQL_PASSWORD=tkfwzjY7y*3pkDAaC8P4BTQt #SQL Benutzer Passwort eingeben
      - MYSQL_DATABASE=nextcloud #Datenbank Name
      - MYSQL_USER=garrycloud #SQL Nutzername
      - MYSQL_INITDB_SKIP_TZINFO=1
      - MARIADB_AUTO_UPGRADE=1
    networks:
      - backend
  nextcloud-redis:
    image: redis:alpine
    container_name: nextcloud-redis
    hostname: nextcloud-redis
    networks:
        - backend
    restart: unless-stopped
    command: redis-server --requirepass tkfwzjY7y*3pkDAaC8 # Redis Passwort eingeben
  nextcloud-app:
    #build: .
    image: nextcloud:latest
    container_name: nextcloud-app
    restart: unless-stopped
    depends_on:
      - nextcloud-db
      - nextcloud-redis
    environment:
        TRUSTED_PROXIES: 172.30.255.254/16
        OVERWRITEPROTOCOL: https
        OVERWRITECLIURL: https://nextcloud.sebastiangedigk.com
        OVERWRITEHOST: nextcloud.sebastiangedigk.com
        REDIS_HOST: nextcloud-redis
        REDIS_HOST_PASSWORD: tkfwzjY7y*3pkDAaC8 # Redis Passwort von oben wieder eingeben
        NEXTCLOUD_ADMIN_USER: garry1704
        NEXTCLOUD_ADMIN_PASSWORD: qxm2ZQV7qwx-zfz7qxc
        MYSQL_DATABASE: nextcloud
        MYSQL_USER: garrycloud
        MYSQL_PASSWORD: tkfwzjY7y*3pkDAaC8P4BTQt
        MYSQL_HOST: nextcloud-db

    volumes:
      - ./app:/var/www/html
      - ./daten:/var/www/html/data
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.nextcloud.entrypoints=websecure"
      - "traefik.http.routers.nextcloud.rule=(Host(`nextcloud.sebastiangedigk.com`))"
      - "traefik.http.routers.nextcloud.tls=true"
      - "traefik.http.routers.nextcloud.tls.certresolver=cloudflare"
      - "traefik.http.routers.nextcloud.service=nextcloud"
      - "traefik.http.services.nextcloud.loadbalancer.server.port=80"
      - "traefik.docker.network=frontend"
    networks:
      - frontend
      - backend
  nextcloud-appapi-dsp:
    image: ghcr.io/nextcloud/nextcloud-appapi-dsp:release
    container_name: nextcloud-appapi-dsp
    hostname: nextcloud-appapi-dsp
    restart: unless-stopped
    privileged: true
    environment:
      NC_HAPROXY_PASSWORD: your_secret_key
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      - backend

networks:
  frontend:
    external: true
  backend:
    external: true