version: '3.0'

services:
  proxy:
    image: jwilder/nginx-proxy:alpine
    labels:
      - "com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy=true"
    container_name: nextcloud-proxy
    networks:
      nextcloud:
        ipv4_address: 172.27.1.2
    ports:
      - 80:80
      - 443:443
    volumes:
      - ./proxy/conf.d:/etc/nginx/conf.d:rw
      - ./proxy/vhost.d:/etc/nginx/vhost.d:rw
      - ./proxy/html:/usr/share/nginx/html:rw
      - ./proxy/certs:/etc/nginx/certs:ro
      - /var/run/docker.sock:/tmp/docker.sock:ro
    restart: unless-stopped

  letsencrypt:
    image: jrcs/letsencrypt-nginx-proxy-companion
    container_name: nextcloud-letsencrypt
    depends_on:
      - proxy
    networks:
      nextcloud:
        ipv4_address: 172.27.1.3
    volumes:
      - ./proxy/certs:/etc/nginx/certs:rw
      - ./proxy/vhost.d:/etc/nginx/vhost.d:rw
      - ./proxy/html:/usr/share/nginx/html:rw
      - /var/run/docker.sock:/var/run/docker.sock:ro
    restart: unless-stopped

  db:
    image: mariadb
    container_name: nextcloud-mariadb
    networks:
      nextcloud:
        ipv4_address: 172.27.1.4
    volumes:
      - ./db:/var/lib/mysql
    environment:
      - MYSQL_ROOT_PASSWORD=
      - MYSQL_PASSWORD=
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
    restart: unless-stopped

  app:
    image: nextcloud:11.0.5
    container_name: nextcloud-app
    networks:
      nextcloud:
        ipv4_address: 172.27.1.5
    depends_on:
      - letsencrypt
      - proxy
      - db
    volumes:
      - ./app/config:/var/www/html/config
      - ./app/custom_apps:/var/www/html/custom_apps
      - ./app/data:/var/www/html/data
      - ./app/themes:/var/www/html/themes
    environment:
      - VIRTUAL_HOST=nextcloud.example.com
      - LETSENCRYPT_HOST=nextcloud.example.com
      - LETSENCRYPT_EMAIL=webmaster@example.com
    restart: unless-stopped

  postfix:
    image: alterrebe/postfix-relay
    container_name: nextcloud-postfix
    networks:
      nextcloud:
        ipv4_address: 172.27.1.6
    depends_on:
      - app
    environment:
      - RELAY_HOST_NAME=nextcloud.example.com
      - ACCEPTED_NETWORK=0.0.0.0/0
      - EXT_RELAY_HOST=[smtp.example.com]
      - EXT_RELAY_PORT=587
      - SMTP_LOGIN=smtp@example.com
      - SMTP_PASSWORD=
      - USE_TLS=yes
      - TLS_VERIFY=may
    restart: always

networks:
  nextcloud:
    driver: bridge
    ipam:
      config:
        - subnet: 172.27.1.0/24