version: "3"

networks:
  nginx-proxy_default:
#    external: true
    driver: bridge
#  nginx-internal:
#  nginx-nm:
#    external: true
#  nginx:
#    driver: bridge
#    external: false
  mysql:
#    external: true

services:
  nextcloud:
    profiles: ["all"]
    user: 1000:1000
    image: nextcloud
    container_name: nextcloud
    restart: always
    ports:
      - 10000:80
    volumes:
      - nextcloud:/var/www/html
    networks:
       - nginx-proxy_default
#      - nginx
#  jellyfin:
#    build:
#   #./jellyfin/ffmpegof/docker/jellyfin
#    #image: ghcr.io/tminaorg/jellyfin-ffmpegof:latest
#    #environment:
#      # - TZ=Europe/Berlin
#      # - FFMPEGOF_DATABASE_TYPE=postgres
#      # - FFMPEGOF_DATABASE_HOST=localhost
#      # - FFMPEGOF_DATABASE_PORT=5432
#      # - FFMPEGOF_DATABASE_NAME=ffmpegof
#      # - FFMPEGOF_DATABASE_USERNAME=postgres
#      # - FFMPEGOF_DATABASE_PASSWORD=supersecurepassword
#    ports:
#      - 8096:8096 # public should access via reverse proxy
#    volumes:
#      - ./jellyfin/config:/config:Z
#      - ./jellyfin/cache:/config/cache:z
#      - ./jellyfin/transcodes:/config/transcodes:z
#      - ./jellyfin/subtitles:/config/data/subtitles:z
#      - ./jellyfin/media:/var/storage/media:ro # optional media folder, usually readonly is enough
#    restart: always
#  nfs-server:
#    image: ghcr.io/obeone/nfs-server:latest
#    cap_add:
#      - SYS_ADMIN
#    environment:
#      # - TZ=Europe/Berlin
#      - NFS_EXPORT_0=/config/cache           *(rw,sync,no_subtree_check,no_root_squash)
#      - NFS_EXPORT_1=/config/transcodes      *(rw,sync,no_subtree_check,no_root_squash)
#      - NFS_EXPORT_2=/config/data/subtitles  *(rw,sync,no_subtree_check,no_root_squash)
#      - NFS_EXPORT_3=/var/storage/media      *(rw,sync,no_subtree_check,no_root_squash) # optional media folder
#    ports:
#      - 2049:2049
#    volumes:
#      - ./jellyfin/cache:/config/cache:z
#      - ./jellyfin/transcodes:/config/transcodes:z
#      - ./jellyfin/subtitles:/config/data/subtitles:z
#      - ./jellyfin/media:/var/storage/media:ro # optional media folder, readonly is ideal since workers only read files and transcode them to other dirs
#    restart: always

  jellyfin:
    profiles: ["all"]
    image: bitwrk/jellyfin-rffmpeg:latest
    container_name: jellyfin
    user: 1000:1000
    command: /bin/bash chmod +x /start.sh && ./start.sh
##export jellyfin_data_path="/config"
#    #network_mode: 'host'
#  #  enviorment:
##    jellyfin_data_path: /config
    volumes:
#      - ./rffmpeg.old/rffmpeg:/usr/local/bin/rffmpeg
      - ./jellyfin/start.sh:/start.sh
      - ./jellyfin/config:/config
      - ./jellyfin/cache:/cache
      - ./jellyfin/media:/media
      - ./jellyfin/media2:/media2:ro
      - ./jellyfin/rffmpeg.yml:/etc/rffmpeg/rffmpeg.yml
      - ./.ssh:/config/.ssh:ro
    restart: 'unless-stopped'
 #   network_mode: "host"
    ports:
      -  8096:8096
  #  networks:
  #    - nginx
#  shadowsocks:
#    image: dockage/shadowsocks-server:latest
#    ports:
#      - "8388:8388"
#    environment:
#      - SS_PASSWORD=sK4mmi@=
#      - SS_METHOD=aes-256-cfb
#  3#mysql:
#networks:
 #     - nginx   # profiles: ["all"]
   # - 8096:8096
    #image: mariadb
#    image: arm64v8/mysql:5.7
    #Nginx Service
# chisel:
#    image: jpillora/chisel
#    command: server --port 1080 --socks5 --reverse
#    ports:
#      - "1080:1080"
#    stdin_open: true
#    tty: true
#    restart: "no"
#  subsocks:
#    image: luyuhuang/subsocks
#    restart: always
#    expose:
#      - '4444'
# a   ports:
#      - '4444:4444'
#    volumes:
#      - ./config.toml:/subsocks/config.toml
#3#  chisel:
#    profiles: ["all", "chisel"]
#    image: jpillora/chisel
#    command: chisel server --port 1080
#    ports:
#       - "1080:1080"
#  nginx:
#    profiles: ["all"]
#    image: nginx:alpine
#    volumes:
#       - /etc/nginx-docker/nginx.conf:/etc/nginx/nginx.conf:ro
      # - /etc/nginx/nginx.conf:/etc/nginx-docker/nginx.conf:ro
#    container_name: webserver
#    restart: unless-stopped
#    tty: true
#    ports:
##      - "80:80"
 #     - "443:443"
 #   networks:
  #    - nginx
 #     - nginx-proxy-manager
  nginx-proxy-manager:
    profiles: ["all"]
    image: 'jc21/nginx-proxy-manager:latest'
    restart: unless-stopped
    ports:
      # These ports are in format <host-port>:<container-port>
      - '80:80' # Public HTTP Port
      - '443:443' # Public HTTPS Port
      - '81:81' # Admin Web Port
      # Add any other Stream port you want to expose
      # - '21:21' # FTP
    networks:
   #   - nginx
      - nginx-proxy_default
   # Uncomment the next line if you uncomment anything in the section
    # environment:
      # Uncomment this if you want to change the location of
      # the SQLite DB file within the container
      # DB_SQLITE_FILE: "/data/database.sqlite"

      # Uncomment this if IPv6 is not enabled on your host
      # DISABLE_IPV6: 'true'
#    networks:
 #     - nginx
    volumes:
      - ./data:/data
      - ./letsencrypt:/etc/letsencrypt
  cowrie:
    profiles: ["all"]
    image: cowrie/cowrie
    volumes:
        - ./prickly-pete/var/cowrie/log:/cowrie/cowrie-git/var/log/cowrie
        - ./prickly-pete/src/configs/cowrie.cfg:/cowrie/cowrie-git/etc/cowrie.cfg
        - ./prickly-pete/userdb.txt:/cowrie/cowrie-git/etc/userdb.txt
    ports:
        #- "22:2222"            # ssh (use this if you have :22 free!)
        - "22:2222"           # ssh
   # networks:
   #   - nginx
  vaultwarden:
    profiles: ["all"]
    container_name: vaultwarden
    image: vaultwarden/server:latest
    restart: unless-stopped
    volumes:
      - ./data/:/data/
    ports:
      - 8000:80
    networks:
      - nginx-proxy_default
   #   - nginx
  gitea:
    profiles: ["all"]
    image: gitea/gitea:latest
    container_name: gitea
    environment:
      - USER_UID=1000
      - USER_GID=1000
    restart: always
   # networks:
   #   - nginx
    volumes:
      - ./gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "3000:3000"
      - "222:22"
  homarr:
    profiles: ["all"]
    container_name: homarr
    image: ghcr.io/ajnart/homarr:latest
    restart: unless-stopped
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock # Optional, only if you want docker integration
      - ./homarr/configs:/app/data/configs
      - ./homarr/icons:/app/public/icons
      - ./homarr/data:/data
    ports:
      - '7575:7575'
    networks:
       - nginx-proxy_default
   #   - nginx
  db:
    profiles: ["all"]
    image: mariadb:latest
    environment:
      - MYSQL_ALLOW_EMPTY_PASSWORD=yes
      - MYSQL_DATABASE=powerdnsadmin
      - MYSQL_USER=pdns
      - MYSQL_PASSWORD=mypdns
    ports:
      - 3306:3306
    restart: always
    volumes:
      - /pda-mysql:/var/lib/mysql
   # networks:
   #W   - nginx
    #command:
  unbound:
    container_name: unbound
    image: "mvance/unbound:latest"
    expose:
      - "55"
 #   networks:
 #     - dns
    ports:
      - "55:53/tcp"
      - "55:53/udp"
    volumes:
      - "./unbound/my_conf/forward-records.conf:/opt/unbound/etc/unbound/forward-records.conf"
      - "./unbound/my_conf/a-records.conf:/opt/unbound/etc/unbound/a-records.conf"
    restart: unless-stopped
  pdns:
    #build: pdns
    profiles: ["all"]
    image: pschiffe/pdns-mysql
    hostname: pdns
    domainname: computingforgeeks.com
    restart: always
    depends_on:
      - db
    links:
      - "db:mysql"
  #  networks:
   #   - nginx
    ports:
      - "56:53"
      - "56:53/udp"
      - "8081:8081"
    volumes:
      - /etc/bind/bind.conf:/bind.conf
      - /etc/bind/spidershomelab.local.zone:/var/named/spidershomelab.local.zone
    environment:
      - PDNS_launch=bind,gmysql
      - PDNS_bind-config=/bind.conf
      - PDNS_gmysql_host=db
      - PDNS_gmysql_port=3306
      - PDNS_gmysql_user=pdns
      - PDNS_gmysql_dbname=powerdnsadmin
      - PDNS_gmysql_password=mypdns
      - PDNS_master=yes
      - PDNS_api=yes
      - PDNS_api_key=VW8weXhMSHhOdGV6ZFU2
      - PDNSCONF_API_KEY=VW8weXhMSHhOdGV6ZFU2
      - PDNS_webserver=yes
      - PDNS_webserver-allow-from=127.0.0.1,10.0.0.0/8,172.0.0.0/8,192.0.0.0/24
      - PDNS_webserver_address=0.0.0.0
      - PDNS_webserver_password=secret2
      - PDNS_version_string=anonymous
      - PDNS_default_ttl=1500
      - PDNS_allow_notify_from=0.0.0.0
      - PDNS_allow_axfr_ips=127.0.0.1
    #  - PDNS_forward-zone=spidershomelab.local=127.0.0.1:8080
  web_app:
    profiles: ["all"]
    image: powerdnsadmin/pda-legacy:latest
    container_name: powerdns_admin
    ports:
      - "8082:80"
    depends_on:
      - db
    restart: always
    links:
      - db:mysql
      - pdns:pdns
    logging:
      driver: json-file
      options:
        max-size: 50m
    environment:
      - SQLALCHEMY_DATABASE_URI=mysql://pdns:mypdns@db/powerdnsadmin
      - GUNICORN_TIMEOUT=60
      - GUNICORN_WORKERS=2
      - GUNICORN_LOGLEVEL=DEBUG
  #  networks:
   #   - nginx
volumes:
  nextcloud: