version: '3'

services:
  guacd:
    container_name: guacd
    hostname: guacd
    image: guacamole/guacd
    restart: always
    networks:
      - xrdp_default
  guacamole:
    container_name: guacamole
    hostname: guacamole
    image: guacamole/guacamole
    restart: always
    networks:
      - xrdp_default
    volumes:
      - ./data/config:/guacamole
        #ports:
        #    - "8080:8080"
    environment:
      - GUACD_HOSTNAME=guacd
      - GUACAMOLE_HOME=/guacamole
      - MYSQL_HOSTNAME=guacdb
      - MYSQL_PORT=3306
      - MYSQL_DATABASE=guacamole_db
      - MYSQL_USER=guacamole_user
      - MYSQL_PASSWORD=PASSWORD
      - LDAP_HOSTNAME=LDAPSERVER
      - LDAP_PORT=389
      - LDAP_ENCRYPTION_METHOD=none
      - LDAP_USER_BASE_DN=CN=Users,DC=DOMAIN,DC=net
      - LDAP_SEARCH_BIND_DN=CN=guacauth,CN=Users,DC=DOMAIN,DC=net
      - LDAP_SEARCH_BIND_PASSWORD=PASSWORD
      - LDAP_USERNAME_ATTRIBUTE=samAccountName
      - DUO_API_HOSTNAME=DUOAPIHOSTNAME
      - DUO_INTEGRATION_KEY=DUOINTKEY
      - DUO_SECRET_KEY=DUOSECRET
      - DUO_APPLICATION_KEY=DUOAPPKEY
  mariadb:
    container_name: guacdb
    hostname: guacdb
    image: mariadb
    restart: always
    networks:
      - xrdp_default
    volumes:
      - ./data/db:/var/lib/mysql
    environment:
      MYSQL_ROOT_PASSWORD: PASSWORD

networks:
  xrdp_default:
    external: true