nextcloud/docker-compose.yaml

---
version: '3.3'

services:
  nextcloud-app:
    image: nextcloud:latest
    container_name: nextcloud-app
    restart: always
    volumes:
      - $PWD/config:/var/www/html/config # :Z is only for SELinux-enabled systems like Fedora. Remove if necessary.
      - $PWD/cloud:/var/www/html
      - $PWD/apps:/var/www/html/apps
    environment:
      - NEXTCLOUD_DATA_DIR=/var/www/html/data
    labels:
      - "traefik.enable=true"
      - "traefik.port=80"
      - "traefik.docker.network=webproxy"
      # Entrypoint and TLS
      - "traefik.http.routers.cloud.entrypoints=websecure"
      - "traefik.http.routers.cloud.rule=Host(`<snip>`)" # Put in your hostname here, e.g. subdomain.domain.tld
      - "traefik.http.routers.cloud.tls.certresolver=mytlschallenge"
      # Middlewares:
      - "traefik.http.routers.cloud.middlewares=cloud@docker,cloud-dav@docker"
      # Middleware cloud adds additional headers:
      - "traefik.http.middlewares.cloud.headers.customFrameOptionsValue=SAMEORIGIN"
      - "traefik.http.middlewares.cloud.headers.framedeny=true"
      - "traefik.http.middlewares.cloud.headers.sslredirect=true"
      - "traefik.http.middlewares.cloud.headers.stsIncludeSubdomains=true"
      - "traefik.http.middlewares.cloud.headers.stsPreload=true"
      - "traefik.http.middlewares.cloud.headers.stsSeconds=15552000"
      # Middleware cloud-dav replaces .well-known paths for caldav and carddav with proper nextcloud path
      - "traefik.http.middlewares.cloud-dav.replacepathregex.regex=^/.well-known/ca(l|rd)dav"
      - "traefik.http.middlewares.cloud-dav.replacepathregex.replacement=/remote.php/dav/"
      #
#      - "traefik.enable=true"
      - "traefik.http.routers.whoami.rule=Host(`<snip>`)"
#      - "traefik.http.routers.whoami.entrypoints=websecure"
#      - "traefik.http.routers.whoami.tls.certresolver=mytlschallenge"
#      - "traefik.docker.network=webproxy"

    networks:
      - webproxy
      - backend
    logging:
      options:
        max-size: '12m'
        max-file: '5'
      driver: json-file

networks:
  webproxy: # this is the network provided by traefik
    external:
      name: webproxy
  backend: # your database should be in this network