docker-compose.yml

version: '3'

services:

  # Proxy for ssl termination and easier hostname access
  # SSL certificates with the virtual host name need to be added to ./data/ssl
  proxy:
    build:
      context: ./docker
      dockerfile: Dockerfile.nginx
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /var/run/docker.sock:/tmp/docker.sock:ro
      - ./data/ssl/:/etc/nginx/certs
    environment:
      DHPARAM_BITS: 2048
      DHPARAM_GENERATION: "false"
      HTTPS_METHOD: "noredirect"
      HSTS: "off"
    cap_add:
      - SYS_ADMIN
    networks:
      default:
        aliases:
          - nextcloud${DOMAIN_SUFFIX}
          - nextcloud2${DOMAIN_SUFFIX}
          - nextcloud3${DOMAIN_SUFFIX}
          - stable16${DOMAIN_SUFFIX}
          - stable17${DOMAIN_SUFFIX}
          - stable18${DOMAIN_SUFFIX}
          - collabora${DOMAIN_SUFFIX}
          - onlyoffice${DOMAIN_SUFFIX}
          - collabora2${DOMAIN_SUFFIX}
          - proxy${DOMAIN_SUFFIX}
          - hpb${DOMAIN_SUFFIX}
          - push${DOMAIN_SUFFIX}
          - keycloak${DOMAIN_SUFFIX}

  haproxy:
    image: haproxy
    expose:
      - 80
    environment:
      VIRTUAL_HOST: "proxy${DOMAIN_SUFFIX}"
    volumes:
      - ./docker/configs/haproxy.conf:/usr/local/etc/haproxy/haproxy.cfg:ro

  nextcloud:
    image: ghcr.io/juliushaertl/nextcloud-dev-php${PHP_VERSION:-73}:latest
    environment:
      # SQL: 'sqlite'
      SQL: 'mysql'
      #SQL: 'pgsql'
      NEXTCLOUD_AUTOINSTALL: "YES"
      NEXTCLOUD_AUTOINSTALL_APPS:
      WITH_REDIS: "YES"
      VIRTUAL_HOST: "nextcloud${DOMAIN_SUFFIX}"
      HTTPS_METHOD: "noredirect"
      ADDITIONAL_APPS_PATH:
      NEXTCLOUD_TRUSTED_DOMAINS:
    volumes:
      - '${REPO_PATH_SERVER:-/home/jus/repos/nextcloud/server}:/var/www/html'
      - data:/var/www/html/data
      - config:/var/www/html/config
      - '${ADDITIONAL_APPS_PATH:-./data/apps-extra}:/var/www/html/apps-extra'
      - /var/www/html/apps-writable
      - ./data/skeleton/:/skeleton
      - ./data/additional.config.php:/var/www/html/config/additional.config.php:ro
      - ./data/shared:/shared
    ports:
      - "${PORTBASE:-800}0:80"
    depends_on:
      - database-mysql
      #- database-postgres
      - redis
      - mail

  nextcloud2:
    image: ghcr.io/juliushaertl/nextcloud-dev-php${PHP_VERSION:-73}:latest
    environment:
      # SQL: 'sqlite'
      # SQL: 'mysql'
      SQL: 'pgsql'
      NEXTCLOUD_AUTOINSTALL: "NO"
      NEXTCLOUD_AUTOINSTALL_APPS:
      WITH_REDIS: "YES"
      VIRTUAL_HOST: "nextcloud2${DOMAIN_SUFFIX}"
      HTTPS_METHOD: "noredirect"
      ADDITIONAL_APPS_PATH:
      NEXTCLOUD_TRUSTED_DOMAINS:
    volumes:
      - '${REPO_PATH_SERVER:-/home/jus/repos/nextcloud/server}:/var/www/html'
      - data:/var/www/html/data
      - config:/var/www/html/config
      - '${ADDITIONAL_APPS_PATH:-./data/apps-extra}:/var/www/html/apps-extra'
      - /var/www/html/apps-writable
      - ./data/skeleton/:/skeleton
      - ./data/additional.config.php:/var/www/html/config/additional.config.php:ro
    ports:
      - "${PORTBASE:-800}1:80"
    depends_on:
      #- database-mysql
      - database-postgres
      - redis
      - mail

  stable16:
    image: ghcr.io/juliushaertl/nextcloud-dev-php${PHP_VERSION:-72}:latest
    environment:
      SQL: 'sqlite'
      NEXTCLOUD_AUTOINSTALL: "YES"
      NEXTCLOUD_AUTOINSTALL_APPS:
      WITH_REDIS: "YES"
      VIRTUAL_HOST: stable16${DOMAIN_SUFFIX}
      HTTPS_METHOD: "noredirect"
      ADDITIONAL_APPS_PATH:
      NEXTCLOUD_TRUSTED_DOMAINS:
    volumes:
      - '${STABLE_ROOT_PATH:-/home/jus/repos/nextcloud}/stable16:/var/www/html'
      - '${STABLE_ROOT_PATH:-/home/jus/repos/nextcloud}/stable16/apps-extra:/var/www/html/apps-extra'
      - /var/www/html/data
      - /var/www/html/config
      - /var/www/html/apps-writable
      - ./data/skeleton/:/skeleton
      - ./data/additional.config.php:/var/www/html/config/additional.config.php:ro
    depends_on:
      - redis
      - mail

  stable17:
    image: ghcr.io/juliushaertl/nextcloud-dev-php${PHP_VERSION:-72}:latest
    environment:
      SQL: 'sqlite'
      NEXTCLOUD_AUTOINSTALL: "YES"
      NEXTCLOUD_AUTOINSTALL_APPS:
      WITH_REDIS: "YES"
      VIRTUAL_HOST: stable17${DOMAIN_SUFFIX}
      HTTPS_METHOD: "noredirect"
      ADDITIONAL_APPS_PATH:
      NEXTCLOUD_TRUSTED_DOMAINS:
    volumes:
      - '${STABLE_ROOT_PATH:-/home/jus/repos/nextcloud}/stable17:/var/www/html'
      - '${STABLE_ROOT_PATH:-/home/jus/repos/nextcloud}/stable17/apps-extra:/var/www/html/apps-extra'
      - /var/www/html/data
      - /var/www/html/config
      - /var/www/html/apps-writable
      - ./data/skeleton/:/skeleton
      - ./data/additional.config.php:/var/www/html/config/additional.config.php:ro
    depends_on:
      - redis
      - mail

  stable18:
    image: ghcr.io/juliushaertl/nextcloud-dev-php${PHP_VERSION:-72}:latest
    environment:
      SQL: 'sqlite'
      NEXTCLOUD_AUTOINSTALL: "YES"
      NEXTCLOUD_AUTOINSTALL_APPS:
      WITH_REDIS: "YES"
      VIRTUAL_HOST: stable18${DOMAIN_SUFFIX}
      HTTPS_METHOD: "noredirect"
      ADDITIONAL_APPS_PATH:
      NEXTCLOUD_TRUSTED_DOMAINS:
    volumes:
      - '${STABLE_ROOT_PATH:-/home/jus/repos/nextcloud}/stable18:/var/www/html'
      - '${STABLE_ROOT_PATH:-/home/jus/repos/nextcloud}/stable18/apps-extra:/var/www/html/apps-extra'
      - /var/www/html/data
      - /var/www/html/config
      - /var/www/html/apps-writable
      - ./data/skeleton/:/skeleton
      - ./data/additional.config.php:/var/www/html/config/additional.config.php:ro
    depends_on:
      - redis
      - mail

  database-mysql:
    image: mariadb:10.5
    environment:
      MYSQL_ROOT_PASSWORD: 'nextcloud'
      MYSQL_PASSWORD: 'nextcloud'
      MYSQL_USER: 'nextcloud'
      MYSQL_DATABASE: 'nextcloud'
    ports:
      - "${PORTBASE:-800}2:3306"
    volumes:
      - mysql:/var/lib/mysql

  database-postgres:
    image: postgres:latest
    environment:
      POSTGRES_PASSWORD: postgres
    expose:
      - 5432
    volumes:
      - postgres:/var/lib/postgresql

  redis:
    image: redis:6

  ldap:
    image: osixia/openldap
    command: --copy-service --loglevel debug
    expose:
      - 389
      - 636
    ports:
      - 3389:389
    environment:
      LDAP_DOMAIN: planetexpress.com
      LDAP_BASE_DN: dc=planetexpress,dc=com
    volumes:
      - ./data/ldap:/container/service/slapd/assets/config/bootstrap/ldif/custom

  ldapadmin:
    image: osixia/phpldapadmin
    environment:
      PHPLDAPADMIN_LDAP_HOSTS: ldap
      PHPLDAPADMIN_HTTPS: 'false'
    ports:
      - "${PORTBASE:-800}8:80"

  saml:
    image: unicon/simplesamlphp
    volumes:
      - ./docker/configs/var-simplesamlphp/config:/var/simplesamlphp/config
      - ./docker/configs/var-simplesamlphp/cert:/var/simplesamlphp/cert
      - ./docker/configs/var-simplesamlphp/metadata:/var/simplesamlphp/metadata
    environment:
      VIRTUAL_HOST: "sso${DOMAIN_SUFFIX}"
    expose:
      - 80

  mail:
    image: mailhog/mailhog
    environment:
      VIRTUAL_HOST: "mail${DOMAIN_SUFFIX}"
      VIRTUAL_PORT: 8025

  smb:
    image: dperson/samba
    ports:
      - 139
      - 445
    environment:
      # -u "<username;password>[;ID;group;GID]"
      USER: "admin;admin"
      USER2: "user1;user1"
      USER3: "user1;user1"
      # -s "<name;/path>[;browse;readonly;guest;users;admins;writelist;comment]"
      SHARE: "public;/smbmount;yes;no;yes"
      SHARE2: "user1 private share;/smb/user1;no;no;no;user1"
      SHARE3: "user2 private share;/smb/user2;no;no;no;user2"
    volumes:
      - smb:/smbmount

  blackfire:
    image: blackfire/blackfire:2
    ports:
      - 8707:8307
    environment:
      - BLACKFIRE_SERVER_ID
      - BLACKFIRE_SERVER_TOKEN

  collabora:
    image: collabora/code:latest
    expose:
      - 9980
    cap_add:
      - MKNOD
    environment:
      domain: nextcloud${DOMAIN_SUFFIX}
      dictionaries: de_DE en_US en_GB
      username: admin
      password: admin
      VIRTUAL_HOST: collabora${DOMAIN_SUFFIX}
      VIRTUAL_PORT: 9980
      VIRTUAL_PROTO: http
      extra_params: "--o:ssl.enable=false"

  collabora2:
    image: collabora/code:latest
    restart: on-failure
    expose:
      - 9980
    cap_add:
      - MKNOD
    environment:
      domain: nextcloud${DOMAIN_SUFFIX}
      username: admin
      password: admin
      VIRTUAL_HOST: collabora2${DOMAIN_SUFFIX}
      VIRTUAL_PORT: 9980
      VIRTUAL_PROTO: https

  onlyoffice:
    image: onlyoffice/documentserver-ee:latest
    environment:
      VIRTUAL_HOST: onlyoffice${DOMAIN_SUFFIX}
    expose:
      - '80'
    volumes:
      - document_data:/var/www/onlyoffice/Data
      - document_log:/var/log/onlyoffice

  minio:
    image: minio/minio
    environment:
      VIRTUAL_HOST: minio${DOMAIN_SUFFIX}
      MINIO_ACCESS_KEY: nextcloud
      MINIO_SECRET_KEY: nextcloud
    ports:
      - "${PORTBASE:-800}5:9000"
      - 9001:9001
    volumes:
      - objectstorage_minio:/data
    command: server /data --console-address ":9001"

  s3:
    image: lphoward/fake-s3
    expose:
      - 4569
    volumes:
      - objectstorage_fakes3:/fakes3_root

  elasticsearch:
    build:
      context: ./docker
      dockerfile: Dockerfile.elasticsearch
    environment:
      discovery.type: single-node
    volumes:
      - elasticsearch_data:/usr/share/elasticsearch/data

  push:
    image: nextcloud_notify_push
    ports:
      - '8191:80'
    environment:
      RUST_LOG: debug
      VIRTUAL_HOST: push${DOMAIN_SUFFIX}
      VIRTUAL_PORT: 8191
      DATABASE_URL: mysql://nextcloud:nextcloud@master_database-mysql_1/nextcloud
      REDIS_URL: redis://redis
      NEXTCLOUD_URL: https://nextcloud.local.dev.bitgrid.net

  keycloak:
    image: quay.io/keycloak/keycloak:13.0.1
    expose:
      - 8080
    volumes:
      - ./docker/configs/keycloak:/tmp/keycloak
    environment:
      VIRTUAL_HOST: "keycloak${DOMAIN_SUFFIX}"
      VIRTUAL_PORT: 8080
      KEYCLOAK_USER: admin
      KEYCLOAK_PASSWORD: admin
      PROXY_ADDRESS_FORWARDING: "true"
      KEYCLOAK_IMPORT: /tmp/keycloak/realm-export.json

  av:
    #debian: image: mkodockx/docker-clamav
    image: mkodockx/docker-clamav:alpine
    container_name: nextav
    restart: unless-stopped
    volumes:
      - clam:/var/lib/clamav

volumes:
  data:
  config:
  mysql:
  postgres:
  document_data:
  document_log:
  objectstorage_fakes3:
  objectstorage_minio:
  smb:
  elasticsearch_data:
  clam:

networks:
  default:
    ipam:
      driver: default
      config:
        - subnet: ${DOCKER_SUBNET:-192.168.21.0/24}