version: '3.3'
services:
  db:
    image: mariadb
    container_name: db
    hostname: nextcloud
    command: --transaction-isolation=READ-COMMITTED --log-bin=ROW
    restart: unless-stopped
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
      - ./database:/var/lib/mysql
    environment:
      - MYSQL_ROOT_PASSWORD=mysqlpw #SQL root Passwort eingeben
      - MYSQL_PASSWORD=mysqlpw
      - MYSQL_DATABASE=nextcloud #Datenbank Name
      - MYSQL_USER=nextcloud #SQL Nutzername
      - MYSQL_INITDB_SKIP_TZINFO=1
    networks:
      - default
  redis:
    image: redis:alpine
    container_name: redis
    hostname: redis
    networks:
        - default
    restart: unless-stopped
    command: redis-server --requirepass redispw # Redis Passwort eingeben
  app:
    image: nextcloud:21-fpm-alpine
    container_name: app
    restart: unless-stopped
    depends_on:
      - db
      - redis
    ports:
      - 9024:9000
    environment:
        OVERWRITEPROTOCOL: https
        REDIS_HOST: redis
        REDIS_HOST_PASSWORD: redispw
        MYSQL_PASSWORD: mysqlpw
        MYSQL_DATABASE: nextcloud
        MYSQL_USER: nextcloud
        MYSQL_HOST: db
        NEXTCLOUD_ADMIN_USER: admin
        NEXTCLOUD_ADMIN_PASSWORD: admin
        #NEXTCLOUD_TRUSTED_DOMAINS: nextcloud.euredomain.de
        NEXTCLOUD_FQDN: nextcloud.euredomain.de
        OVERWRITEHOST: nextcloud.euredomain.de
        OVERWRITEPROTOCOL: https
        # docker name of the reverse proxy container (space separated list of fqdns/ips)
        TRUSTED_PROXIES: traefik
    volumes:
      - ./app:/var/www/html
      - ./data:/var/www/html/data
    networks:
      - proxy
      - default
  web:
    image: nginx
    container_name: web
    restart: always
    ports:
      - 9023:80
    links:
      - app
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
      - ./app:/var/www/html
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.nextcloud.entrypoints=https"
      - "traefik.http.routers.nextcloud.middlewares=backend-secured@file"
      - "traefik.http.routers.nextcloud.rule=Host(`nextcloud.euredomain.de`)"
      - "traefik.http.routers.nextcloud.tls=true"
      - "traefik.http.routers.nextcloud.tls.certresolver=netcup"
      - "traefik.http.services.nextcloud.loadbalancer.server.port=80"
      - "traefik.docker.network=proxy"
      - "traefik.http.routers.nextcloud.middlewares=nextcloud-dav,secHeaders@file"
      - "traefik.http.middlewares.nextcloud-dav.replacepathregex.regex=^/.well-known/ca(l|rd)dav"
      - "traefik.http.middlewares.nextcloud-dav.replacepathregex.replacement=/remote.php/dav/"
    networks:
      - proxy
      - default

networks:
  proxy:
    external: true