#nginx-proxy_default
version: "3"

networks:
#  pdns:
  acmenet:
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 10.30.50.0/24
  pdns-network:
    ipam:
#      driver: bridge
      config:
        - subnet: 172.31.53.0/24
  nginx-proxy_default:
    driver: bridge

services:
#  pihole:
#    profiles: ["all"]
#    container_name: pihole
#    image: pihole/pihole:latest
#    # For DHCP it is recommended to remove these ports and instead add: network_mode: "host"
#    ports:
#      - "53:53/tcp"
#      - "53:53/udp"
#      - "67:67/udp"
#      - "8082:80/tcp"
#    environment:
#      TZ: 'America/Chicago'
#      # WEBPASSWORD: 'set a secure password here or it will be random'
#    # Volumes store your data between container upgrades
#    volumes:
#      - './etc-pihole:/etc/pihole'
#      - './etc-dnsmasq.d:/etc/dnsmasq.d'
#    #   https://github.com/pi-hole/docker-pi-hole#note-on-capabilities
#    cap_add:
#      - NET_ADMIN


#  shaarli:
#     image: ghcr.io/shaarli/shaarli:latest
     #build: ./
#     ports: [28010:80]
#     profiles: ["all", "non-nextcloud"]
 #networks:
    #  - http-proxy
    # environment:
    #  - PUID=1000  # Replace with the UID of the user on the host machine
    #  - PGID=1000  # Replace with the GID of the group on the host machine
#     volumes:
#       - shaarli-cache:/var/www/shaarli/cache
#       - shaarli-data:/var/www/shaarli/data
 #   labels:
 #     traefik.domain: "${SHAARLI_VIRTUAL_HOST}"
 #     traefik.backend: shaarli
#      traefik.frontend.rule: "Host:${SHAARLI_VIRTUAL_HOST}"
  #~/website/svelte-docker
#  svelte-app:
#    build:
#      context: ~/website/svelte-docker
#      dockerfile: Dockerfile
#    ports:
#      - '5000:5000'
#  svelte-app:
#    profiles: ["all"]
#    build: ./website/test-vite-svelte-docker/web-app
#    command: npm run dev --host # just build the web app, comment out for dev server
#    ports:
#      - 5000:3000
#    volumes:
#      - ./website/test-vite-svelte-docker/web-app/dist:/app/dist
  #svelte-app:
  #  profiles: ["all"]
 #   build: ./website/test-vite-svelte-docker/web-app
 #   command: npm run dev --host # just build the web app, comment out for dev server
 #   ports:
 #     - 5000:5000
 #   volumes:
 #     - ./website/test-vite-svelte-docker/web-app/dist:/app/dist
#pdns-network
  pebble:
    profiles: ["all"]
    #network_mode: host
    image: ghcr.io/letsencrypt/pebble:latest
    command: -config test/config/pebble-config.json -strict -dnsserver 10.30.50.3:8053
    ports:
      - 14000:14000 # HTTPS ACME API
      - 15000:15000 # HTTPS Management API
    networks:
      pdns-network:
      acmenet:
        ipv4_address: 10.30.50.2
  challtestsrv:
    profiles: ["all"]
    image: ghcr.io/letsencrypt/pebble-challtestsrv:latest
    command: -defaultIPv6 "" -defaultIPv4 10.30.50.3
    ports:
      - 8055:8055 # HTTP Management API
    networks:
      pdns-network:
      acmenet:
        ipv4_address: 10.30.50.3
# step-ca:
#    profiles: ["all"]
#    image: smallstep/step-ca
#    container_name: step-ca
#    ports:
#      - "9000:9000"
#      - "8444:8443"
#    volumes:
#      - ./step:/home/step
#    environment:
#      - STEPPATH=/home/step
#    command: ./init_step_ca.sh
##      sh -c "step ca init --name='My CA' --dns='spidershomelab.net' \
##             --address=':9000' --http-listen=':9000' --provisioner='admin' \
##             --password-file=/home/step/password.txt && \
##             step-ca $(cat /home/step/password.txt)"
  home-app:
    profiles: ["all"]
    build: ./website/test-vite-svelte-docker/web-app
    command: npm run build # just build the web app, comment out for dev server
    ports:
      - 9080:3000
    volumes:
      - ./website/test-vite-svelte-docker/web-app/dist:/app/dist

  # this is just if you want to serve the staic site
  nginx:
    profiles: ["all"]
    image: nginx
    ports:
      - 9090:80
    volumes:
      - ./website/test-vite-svelte-docker/web-app/dist:/usr/share/nginx/html # mount the web app's build output
    depends_on:
      - home-app # web-app must be build before server can serve it

  nextcloud:
    profiles: ["all"]
    user: 1000:1000
    image: nextcloud
    container_name: nextcloud
    restart: always
    ports:
      - 10000:80
    volumes:
      - nextcloud:/var/www/html
      - /home/spiderunderurbed/nextcloud-config:/var/www/html/config
    networks:
      - nginx-proxy_default

  jellyfin:
    profiles: ["all"]
    image: bitwrk/jellyfin-rffmpeg:latest
    container_name: jellyfin
    user: 1000:1000
    command: /bin/bash chmod +x /start.sh && ./start.sh
    volumes:
      - ./jellyfin/start.sh:/start.sh
      - ./jellyfin/config:/config
      - ./jellyfin/cache:/cache
      - ./jellyfin/media:/media
      - ./jellyfin/media2:/media2:ro
      - ./jellyfin/rffmpeg.yml:/etc/rffmpeg/rffmpeg.yml
      - ./.ssh:/config/.ssh:ro
    restart: 'unless-stopped'
    ports:
      -  8096:8096

  nginx-proxy-manager:
    profiles: ["all"]
#  profiles: ["all"]
    image: 'jc21/nginx-proxy-manager:latest'
    restart: unless-stopped
    ports:
      - '80:80'
      - '443:443'
      - '81:81'
    networks:
      - nginx-proxy_default
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt

  cowrie:
    profiles: ["all"]
    image: cowrie/cowrie
    volumes:
      - ./prickly-pete/var/cowrie/log:/cowrie/cowrie-git/var/log/cowrie
      - ./prickly-pete/src/configs/cowrie.cfg:/cowrie/cowrie-git/etc/cowrie.cfg
      - ./prickly-pete/userdb.txt:/cowrie/cowrie-git/etc/userdb.txt
    ports:
      - "22:2222"

  vaultwarden:
    profiles: ["all"]
    container_name: vaultwarden
    image: vaultwarden/server:latest
    restart: unless-stopped
    volumes:
      - ./data/:/data/
    ports:
      - 8000:80
    networks:
      - nginx-proxy_default

  gitea:
    profiles: ["all"]
    image: gitea/gitea:latest
    container_name: gitea
    environment:
      - USER_UID=1000
      - USER_GID=1000
    restart: always
    volumes:
      - ./gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "3000:3000"
      - "222:22"

  homarr:
    profiles: ["all"]
    container_name: homarr
    image: ghcr.io/ajnart/homarr:latest
    restart: unless-stopped
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./homarr/configs:/app/data/configs
      - ./homarr/icons:/app/public/icons
      - ./homarr/data:/data
    ports:
      - '7575:7575'
    networks:
      - nginx-proxy_default
  db:
    image: mariadb:latest
    profiles: ["all"]
    networks:
      pdns-network:
    environment:
      - MYSQL_ALLOW_EMPTY_PASSWORD=yes
      - MYSQL_DATABASE=powerdnsadmin
      - MYSQL_USER=pdns
      - MYSQL_PASSWORD=mypdns
    ports:
      - 3306:3306
    restart: always
    volumes:
      - /pda-mysql:/var/lib/mysql
  pdns:
    #build: pdns
    image: pschiffe/pdns-mysql
    hostname: pdns
    profiles: ["all"]
#    domainname: computingforgeeks.com
    networks:
      pdns-network:
        ipv4_address: 172.31.53.6
    volumes:
      - /home/spiderunderurbed/bind/bind.conf:/bind.conf
      - /home/spiderunderurbed/bind/spidershomelab.net.zone:/var/named/spidershomelab.net.zone
    restart: always
    depends_on:
      - db
    links:
      - "db:mysql"
    ports:
      - "127.0.0.1:5300:53"
      - "127.0.0.1:5300:53/udp"
      - "127.0.0.1:8081:8081"
#    ports:
#      - "5300:53"
#      - "5300:53/udp"
#      - "8081:8081"
    environment:
      - PDNS_dnsupdate=true
#      - PDNS_allow-dnsupdate-from=0.0.0.0#
     # - PDNS_dnsupdate=true
      - PDNS_allow_dnsupdate_from=0.0.0.0,10.30.50.2,10.30.50.3
      - PDNS_gmysql_host=db
      - PDNS_gmysql_port=3306
      - PDNS_gmysql_user=pdns
      - PDNS_gmysql_dbname=powerdnsadmin
      - PDNS_gmysql_password=mypdns
      - PDNS_master=yes
      - PDNS_api=yes
      - PDNS_api_key=secret
      - PDNSCONF_API_KEY=secret
      - PDNS_webserver=yes
      - PDNS_webserver-allow-from=0.0.0.0,127.0.0.1,10.0.0.0/8,172.0.0.0/8,192.0.0.0/24,192.168.32.8/32,192.168.0.0/16
      - PDNS_webserver_address=0.0.0.0
      - PDNS_webserver_password=secret2
      - PDNS_version_string=anonymous
      - PDNS_default_ttl=1500
      - PDNS_allow_notify_from=0.0.0.0
      - PDNS_allow_axfr_ips=127.0.0.1
      - PDNS_launch=bind,gmysql
      - PDNS_bind-config=/bind.conf
#pschiffe/pdns
  pdns-recursor:
    image: pschiffe/pdns-recursor:latest
    profiles: ["all"]
    container_name: pdns-recursor
    networks:
      pdns-network:
     #   ipv4_address: 172.31.53.5
  #  networks:
#      - pdns-network
    environment:
      # FORWARD ZONE
      - PDNS_forward-zones-file=/zonefiles.conf
#      - PDNS_forward_zones="spidershomelab.net=192.168.68.77:5300"
#      - PDNS_forward_zones_recurse=".=8.8.8.8:53"
#      - PDNS_forward_zones_recurse="spidershomelab.net=127.0.0.1:5300,.=8.8.8.8:53"
#      - PDNS_forward_zones="spidershomelab.net=0.0.0.0:5300"
#      - PDNS_forward_zones_recurse=".=8.8.8.8"
      # OPTION
#      - PDNS_dnsupdate=true
#      - PDNS_allow_dnsupdate_from=0.0.0.0,10.30.50.2,10.30.50.3
      - PDNS_local_address=0.0.0.0
      - PDNS_local_port=53
      - PDNS_allow_from=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16
      - PDNS_dnssec=off
      - PDNS_aggressive_nsec_cache_size=0
      # LOGGING
      - PDNS_logging_facility=0
      - PDNS_quiet=no
      - PDNS_loglevel=7
      - PDNS_trace=yes
      - PDNS_log_common-errors=yes
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /home/spiderunderurbed/zonesfiles.conf:/zonefiles.conf
    ports:
      - 53:53
      - 53:53/udp
    restart: unless-stopped
      #PDNS_forward_zones: ".=8.8.8.8"
      #PDNS_forward_zones_recurse: ".=8.8.8.8"
      #- PDNS_forward_zones=.=8.8.8.8,100.100.100.100
      #-
#      - PDNS_forward-zones=*=8.8.8.8;8.8.4.4
#      - /etc/bind/bind.conf:/bind.conf#
#      - /etc/bind/spidershomelab.local.zone:/var/named/spidershomelab.local.zone
#      - ./pdns-docker-entrypoint.sh:/docker-entrypoint.sh
#    #  - ./mysql-schema.sql:/usr/share/doc/pdns/4.3.0_to_4.7.0_schema.mysql.sql
#    environment:
#      - PDNS_launch=bind,gmysql
#      - PDNS_bind-config=/bind.conf

  web_app:
    image: powerdnsadmin/pda-legacy:latest
    container_name: powerdns_admin
    profiles: ["all"]
    networks:
      pdns-network:
       # ipv4_address: 172.31.53.10
    ports:
      - "8080:80"
    depends_on:
      - db
    restart: always
    links:
      - db:mysql
      - pdns:pdns
    logging:
      driver: json-file
      options:
        max-size: 50m
    environment:
      - SQLALCHEMY_DATABASE_URI=mysql://pdns:mypdns@db/powerdnsadmin
      - GUNICORN_TIMEOUT=60
      - GUNICORN_WORKERS=2
      - GUNICORN_LOGLEVEL=DEBUG
      #- forward_zones=*=8.8.8.8;8.8.4.4
#  db:
#    profiles: ["all"]
#    image: mariadb:latest
#    environment:
#      - MYSQL_ALLOW_EMPTY_PASSWORD=yes
#      - MYSQL_DATABASE=powerdnsadmin
#      - MYSQL_USER=pdns
#      - MYSQL_PASSWORD=mypdns
#    ports:
#      - 3306:3306
#    restart: always
#    networks:
#      - pdns
#    volumes:
#      - /pda-mysql:/var/lib/mysql
#      - ./mysql-schema.sql:/docker-entrypoint-initdb.d/init.sql
#  pdns:
#    profiles: ["all"]
#    image: pdns-mysql-working:latest
#    hostname: pdns
#    domainname: computingforgeeks.com
#    restart: always
#    depends_on:
#      - db
#    links:
#      - "db:mysql"
#    ports:
#      - "54:53"
#      - "54:53/udp"
#      - "8081:8081"
#    volumes:
#      - /etc/bind/bind.conf:/bind.conf#
#      - /etc/bind/spidershomelab.local.zone:/var/named/spidershomelab.local.zone
#      - ./pdns-docker-entrypoint.sh:/docker-entrypoint.sh
#    #  - ./mysql-schema.sql:/usr/share/doc/pdns/4.3.0_to_4.7.0_schema.mysql.sql
#    environment:
#      - PDNS_launch=bind,gmysql
#      - PDNS_bind-config=/bind.conf
#      - PDNS_gmysql_host=db
#      - PDNS_gmysql_port=3306
#      - PDNS_gmysql_user=pdns
#      - PDNS_gmysql_dbname=powerdnsadmin
#      - PDNS_gmysql_password=mypdns
#      - PDNS_master=yes
#      - PDNS_api=yes
#      - PDNS_api_key=VW8weXhMSHhOdGV6ZFU2
#      - PDNSCONF_API_KEY=VW8weXhMSHhOdGV6ZFU2
#      - PDNS_webserver=yes
#      - PDNS_webserver-allow-from=127.0.0.1,10.0.0.0/8,172.0.0.0/8,192.0.0.0/24
#      - PDNS_webserver_address=0.0.0.0
#      - PDNS_webserver_password=secret2
#      - PDNS_version_string=anonymous
#      - PDNS_default_ttl=1500
#      - PDNS_allow_notify_from=0.0.0.0
#      - PDNS_allow_axfr_ips=127.0.0.1
#    networks:
#      - pdns
#  web_app:
#    profiles: ["all"]
#    image: powerdnsadmin/pda-legacy:latest
#    container_name: powerdns_admin
#    ports:
#      - "8082:80"
#    depends_on:
#      - db
#    restart: always
#    links:
#      - db:mysql
#      - pdns:pdns
#    logging:
#      driver: json-file
#      options:
#        max-size: 50m
#    environment:
#      - SQLALCHEMY_DATABASE_URI=mysql://pdns:mypdns@db/powerdnsadmin
#      - GUNICORN_TIMEOUT=60
#      - GUNICORN_WORKERS=2
#      - GUNICORN_LOGLEVEL=DEBUG
#    networks:
#      - pdns


volumes:
  nextcloud:
 # shaarli-cache:
 # shaarli-data: