db:
    image: mariadb
    container_name: nextcloud-mariadb
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=${TZ}
    networks:
      - proxy
    volumes:
      - ${USERDIR}/mysql:/var/lib/mysql
      - /etc/localtime:/etc/localtime:ro
    environment:
      - MYSQL_ROOT_PASSWORD=Win!
      - MYSQL_PASSWORD=Win!
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
    restart: unless-stopped


  nextcloud:
    image: linuxserver/nextcloud
    container_name: nextcloud
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=${TZ}
    depends_on:
      - db
    volumes:
      - /mnt/raid/nextcloud:/data
      - ${USERDIR}/nextcloud:/config
      #-  ${USERDIR}/nextcloud:/var/www/html
      #- ${USERDIR}/nextcloud/app/config:/var/www/html/config
      #- ${USERDIR}/nextcloud/app/custom_apps:/var/www/html/custom_apps
      #- ${USERDIR}/nextcloud/app/themes:/var/www/html/themes
      - /etc/localtime:/etc/localtime:ro
    labels:
      - traefik.enable=true
      - traefik.backend=nextcloud
      - traefik.frontend.rule=Host:upload.${DOMAIN}
      - traefik.docker.network=proxy
      - traefik.basic.protocol=https
      - traefik.port=443
      - traefik.frontend.redirect.permanent=true
      - traefik.frontend.redirect.regex= https://(.*)/.well-known/(card|cal)dav
      - traefik.frontend.redirect.replacement=https://$$1/remote.php/dav/
      - traefik.frontend.headers.SSLRedirect=true
      - traefik.frontend.headers.STSSeconds=315360000
      - traefik.frontend.headers.browserXSSFilter=true
      - traefik.frontend.headers.contentTypeNosniff=true
      - traefik.frontend.headers.forceSTSHeader=true
      - traefik.frontend.headers.SSLHost=example.com
      - traefik.frontend.headers.STSIncludeSubdomains=true
      - traefik.frontend.headers.STSPreload=true
      - traefik.frontend.headers.frameDeny=true
    networks:
      - proxy
    expose:
      - 443
    restart: unless-stopped