version: '2'

services:

  # Reverse Proxy
  nginx:
    image: xataz/reverse-nginx
    container_name: nginx
    restart: always
    ports:
      - "80:8080"
      - "443:8443"
    depends_on:
      - ghost
      - isso
      - shaarli
    volumes:
      - /mnt/docker/nginx/ssl:/nginx/ssl
      - /var/run/docker.sock:/var/run/docker.sock
    environment:
      - EMAIL=contact@domain.tld
    networks:
      - proxy

  # Administration de base de données
  adminer:
    image: hardware/adminer
    container_name: adminer
    restart: always
    labels:
      - reverse.frontend.domain=adminer.domain.tld
      - reverse.frontend.path=/
      - reverse.frontend.auth=hydrog3n:xxxxxxxx
      - reverse.backend.port=8888
      - reverse.frontend.ssl=true
    networks:
      - proxy
      - db


  # RSS reader
  selfoss:
    image: hardware/selfoss
    container_name: selfoss
    restart: always
    volumes:
      - /mnt/docker/selfoss:/selfoss/data
    labels:
      - reverse.frontend.domain=selfoss.domain.tld
      - reverse.frontend.path=/
      - reverse.backend.port=8888
      - reverse.frontend.ssl=true
    networks:
      - proxy

  # Blog
  ghost:
    image: wonderfall/ghost
    container_name: ghost
    restart: always
    environment:
      - DOMAIN=blog.domain.tld
      - SYNTAX_HIGHLIGHTING=true
      - ENABLE_ISSO=true
      - ISSO_HOST=isso
      - CUSTOM_SMTP=true
      - SMTP_PORT=587
      - SMTP_USER=contact@domain.tld
      - SMTP_HOST=mail.domain.tld
    volumes:
      - /mnt/docker/ghost:/ghost/content
    labels:
      - reverse.frontend.domain=blog.domain.tld
      - reverse.frontend.path=/
      - reverse.backend.port=2368
      - reverse.frontend.ssl=true
    networks:
      - proxy

  # ISSO Server de commentaire
  isso:
    image: wonderfall/isso
    container_name: isso
    volumes:
      - /mnt/docker/isso/config:/config
      - /mnt/docker/isso/db:/db
    labels:
      - reverse.frontend.domain=isso.domain.tld
      - reverse.frontend.path=/
      - reverse.backend.port=8080
      - reverse.frontend.ssl=true
    networks:
      - proxy

  # Serveur GIT Gogs
  gogs:
    image: gogs/gogs
    container_name: gogs
    restart: always
    depends_on:
      - mariadb-git
    ports:
      - "5643:22"
    volumes:
      - /mnt/docker/gogs/data:/data
    labels:
      - reverse.frontend.domain=git.domain.tld
      - reverse.frontend.path=/
      - reverse.backend.port=3000
      - reverse.frontend.ssl=true
    networks:
      - proxy
      - db

  # Shaarli partage de lien
  shaarli:
    image: hydrog3n/shaarli
    container_name: shaarli
    volumes:
      - /mnt/docker/shaarli/data:/shaarli/data
    labels:
      - reverse.frontend.domain=link.domain.tld
      - reverse.frontend.path=/
      - reverse.backend.port=8080
      - reverse.frontend.ssl=true
    networks:
      - proxy

  # Serveur mail
  mailserver:
    image: hardware/mailserver
    container_name: mailserver
    domainname: domain.tld              # Mail server FQDN & reverse = mail.domain.tld.
    hostname: mail
    restart: always
    ports:
      - "25:25"     # SMTP                - Required
    # - "110:110"   # POP3       STARTTLS - Optional - For webmails/desktop clients
    # - "143:143"   # IMAP       STARTTLS - Optional - For webmails/desktop clients
    # - "465:465"   # SMTPS      SSL/TLS  - Optional - Enabled for compatibility reason, otherwise disabled
      - "587:587"   # Submission STARTTLS - Optional - For webmails/desktop clients
      - "993:993"   # IMAPS      SSL/TLS  - Optional - For webmails/desktop clients
    # - "995:995"   # POP3S      SSL/TLS  - Optional - For webmails/desktop clients
      - "4190:4190" # SIEVE      STARTTLS - Optional - Recommended for mail filtering
    environment:
      - DBHOST=mariadb-postfix
      - DBPASS=xxxxxxxx
    # - ENABLE_POP3=true          # Enable POP3 protocol
    # - ENABLE_POSTGREY=true      # Enable greylisting policy server
      - DISABLE_CLAMAV=true       # Disable virus scanning
    # - DISABLE_SPAMASSASSIN=true # Disable SPAM checking
    # - DISABLE_SIEVE=true        # Disable ManageSieve protocol
      - OPENDKIM_KEY_LENGTH=1024
    # - ADD_DOMAINS=mynetflix.eu
    volumes:
      - /mnt/docker/mail/mail:/var/mail
      - /mnt/docker/mail/opendkim:/etc/opendkim/keys
      - /mnt/docker/nginx/certs:/etc/letsencrypt
    depends_on:
      - mariadb-postfix
    networks:
      - proxy
      - db

  # Postfix admin
  postfixadmin:
    image: hardware/postfixadmin
    container_name: postfixadmin
    domainname: domain.tld
    hostname: mail
    restart: always
    environment:
      - DBPASS=xxxxxxxx
      - DBHOST=mariadb-postfix
      - DBUSER=postfix
      - DBNAME=postfix
    depends_on:
      - mailserver
      - mariadb-postfix
    labels:
      - reverse.frontend.domain=postfixadmin.domain.tld
      - reverse.frontend.path=/
      - reverse.backend.port=8888
      - reverse.frontend.ssl=true
    networks:
      - db
      - proxy

    # Webmail Rainloop
  rainloop:
    image: hardware/rainloop
    container_name: rainloop
    restart: always
    volumes:
      - /mnt/docker/rainloop:/rainloop/data
    labels:
      - reverse.frontend.domain=rainloop.domain.tld
      - reverse.frontend.path=/
      - reverse.backend.port=8888
      - reverse.frontend.ssl=true
    networks:
      - proxy

  # Database
  mariadb-postfix:
    image: mariadb:10.1
    container_name: mariadb-postfix
    restart: always
    environment:
      - MYSQL_ROOT_PASSWORD=xxxxxxxx
      - MYSQL_DATABASE=postfix
      - MYSQL_USER=postfix
      - MYSQL_PASSWORD=xxxxxxxx
    volumes:
      - /mnt/docker/mysql_mail/db:/var/lib/mysql
    networks:
      - db

  mariadb-git:
    image: mariadb:10.1
    container_name: mariadb-git
    restart: always
    environment:
      - MYSQL_ROOT_PASSWORD=xxxxxxxx
      - MYSQL_DATABASE=gogs
      - MYSQL_USER=gogs
      - MYSQL_PASSWORD=xxxxxxxx
    volumes:
      - /mnt/docker/mysql_git/db:/var/lib/mysql
    networks:
      - db

  mariadb-piwik:
    image: mariadb:10.1
    container_name: mariadb-piwik
    restart: always
    environment:
      - MYSQL_ROOT_PASSWORD=xxxxxxxx
      - MYSQL_DATABASE=piwik
      - MYSQL_USER=piwik
      - MYSQL_PASSWORD=xxxxxxxx
    volumes:
      - /mnt/docker/mysql_piwik/db:/var/lib/mysql
    networks:
      - db

  # Stat Service
  piwik:
    image: wonderfall/analytics
    container_name: piwik
    restart: always
    volumes:
      - /mnt/docker/piwik/config:/config
    labels:
      - reverse.frontend.domain=piwik.domain.tld
      - reverse.frontend.path=/
      - reverse.backend.port=8888
      - reverse.frontend.ssl=true
    environment:
      - GID=1000
      - UID=1000
    depends_on:
      - mariadb-piwik
    networks:
      - db
      - proxy


networks:
  proxy:
  db: