version: "3"

networks:
  web:
    external: true
  internal:
    external: false

services:
  traefik:
    image: traefik
    container_name: traefik
    restart: always
    ports:
      - "80:80"
      - "443:443"
    labels:
      - traefik.enable=true
      - traefik.backend=traefik
      - traefik.frontend.rule=Host:traefik.example.com
      - traefik.port=81
      - traefik.docker.network=web
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - $PWD/traefik.toml:/traefik.toml:ro
      # - $PWD/acme.json:/acme.json:ro
      - $PWD/certs/:/certs/
    networks:
      - internal
      - web

  # Cells image with two named volumes for the static and for the data
  cells:
    image: pydio/cells:latest
    hostname: xyz
    domainname: example.com
    restart: always
    volumes:
      # - $PWD/cells:/root/.config/pydio/cells
      - $PWD/certs/:/root/ssl/certs/
    environment:
      - CELLS_BIND=xyz.pydio.com:443
      - CELLS_EXTERNAL=https://xyz.example.com
      - CELLS_SSL_KEY_FILE=/root/ssl/certs/cells.key
      - CELLS_SSL_CERT_FILE=/root/ssl/certs/cells.crt
    labels:
      - traefik.enable=true
      - traefik.backend=xyz
      - traefik.frontend.rule=Host:xyz.pydio.com
      - traefik.docker.network=web
      - traefik.port=443
      - traefik.protocol=https
    networks:
      - internal
      - web
    depends_on:
      - mysql

  # MySQL image with a default database cells and a dedicated user pydio
  mysql:
    image: mysql:latest
    restart: always
    environment:
      MYSQL_ROOT_PASSWORD: root
      MYSQL_DATABASE: cells
      MYSQL_USER: pydio
      MYSQL_PASSWORD: P@ssw0rd
    networks:
      - internal
    labels:
      - traefik.enable=false
    command: [mysqld, --character-set-server=utf8mb4, --collation-server=utf8mb4_unicode_ci]
    logging:
      driver: none