version: '3.3'

services:

  db:
    restart: unless-stopped
    image: postgres:11
    networks:
      - nextcloud
    environment:
    - PUID=1000
    - PGID=1000
    - POSTGRES_USER=nextcloud
    - POSTGRES_PASSWORD=password
    - POSTGRES_DB=nextcloud
    volumes:
    - /home/<user>/docker/nextcloud/data:/var/lib/postgresql/data
  redis:
    image: redis:latest
    restart: unless-stopped
    networks:
      - nextcloud
    volumes:
      - /home/<user>/docker/nextcloud/redis:/var/lib/redis

  nextcloud:
    image: nextcloud:latest
    container_name: nextcloud
    restart: unless-stopped
#    user: "1000:1000"
    networks:
      - proxy
      - nextcloud
    depends_on:
      - redis
      - db
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Berlin
      - POSTGRES_DB=nextcloud
      - POSTGRES_USER=nextcloud
      - POSTGRES_PASSWORD=<password>
      - POSTGRES_HOST=db
      - NEXTCLOUD_ADMIN_USER=admin
      - NEXTCLOUD_ADMIN_PASSWORD=<password>
      - REDIS_HOST=redis
      - NEXTCLOUD_TRUSTED_DOMAINS=example.duckdns.org
      - TRUSTED_PROXIES=<blah>
    volumes:
      - /home/<user>/docker/nextcloud/config:/config
      - /home/<user>/docker/nextcloud/ncdata:/var/www/html
#      - /path/to/nextcloud/data:/var/www/html/data
    labels:
      - traefik.http.routers.nextcloud.middlewares=nextcloud,nextcloud_redirect
      - traefik.http.routers.nextcloud.tls.certresolver=http
      - traefik.http.routers.nextcloud.rule=Host(`<example>.duckdns.org`)
      - traefik.http.middlewares.nextcloud.headers.stsSeconds=155520011
      - traefik.http.middlewares.nextcloud.headers.stsIncludeSubdomains=true
      - traefik.http.middlewares.nextcloud.headers.stsPreload=true
      - traefik.http.middlewares.nextcloud_redirect.redirectregex.regex=/.well-known/(card|cal)dav
      - traefik.http.middlewares.nextcloud_redirect.redirectregex.replacement=/remote.php/dav/
      - traefik.enable=true
      - traefik.http.routers.cloud-secure.tls=true
      - traefik.http.services.cloud.loadbalancer.server.port=80
      - traefik.docker.network=proxy


networks:
  proxy:
    external:
      name: proxy

  nextcloud:
      internal: true