version: '2'

services:

  nextcloud:
    build: https://github.com/stebifan/nc-hoffmann-hosting.git
    volumes:
      - nextcloud:/var/www/html
    depends_on:
      - db
      - web
    environment:
      POSTGRES_DB: nextcloud
      POSTGRES_USER: nextcloud
      NC_POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_HOST: db
      NEXTCLOUD_ADMIN_USER: admin
      NEXTCLOUD_ADMIN_PASSWORD: ${NEXTCLOUD_ADMIN_PASSWORD}
      DOMAIN: ${DOMAIN}
    links:
    - db:db
    labels:
      io.rancher.container.hostname_override: container_name
      io.rancher.container.pull_image: always

  web:
    image: hoffmannhosting/nc-hoffmann-hosting-nginx
    links:
      - nextcloud:app
    volumes:
      - nextcloud:/var/www/html:ro
    depends_on:
      - nextcloud
    restart: always
    labels:
      io.rancher.container.hostname_override: container_name
      io.rancher.container.pull_image: always
      https: yes

  db:
    image: postgres
    volumes:
      - db:/var/lib/postgresql/data
    environment:
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: nextcloud
      POSTGRES_USER: nextcloud
    labels:
      io.rancher.container.hostname_override: container_name

  redirect-https:
    image: hoffmannhosting/docker-nginx-https-redirect
    labels:
      io.rancher.container.hostname_override: container_name
      http: yes
    depends_on:
      - web

  letsencrypt:
    image: janeczku/rancher-letsencrypt:v0.5.0
    environment:
      API_VERSION: Production
      AWS_ACCESS_KEY: ''
      AWS_SECRET_KEY: ''
      AZURE_CLIENT_ID: ''
      AZURE_CLIENT_SECRET: ''
      AZURE_RESOURCE_GROUP: ''
      AZURE_SUBSCRIPTION_ID: ''
      AZURE_TENANT_ID: ''
      CERT_NAME: ${DOMAIN}
      CLOUDFLARE_EMAIL: ''
      CLOUDFLARE_KEY: ''
      DNSIMPLE_EMAIL: ''
      DNSIMPLE_KEY: ''
      DNS_RESOLVERS: 8.8.8.8:53,8.8.4.4:53
      DOMAINS: ${DOMAIN}
      DO_ACCESS_TOKEN: ''
      DYN_CUSTOMER_NAME: ''
      DYN_PASSWORD: ''
      DYN_USER_NAME: ''
      EMAIL: s.hoffmann@hoffmann-hosting.de
      EULA: 'Yes'
      GANDI_API_KEY: ''
      OVH_APPLICATION_KEY: ''
      OVH_APPLICATION_SECRET: ''
      OVH_CONSUMER_KEY: ''
      PROVIDER: HTTP
      PUBLIC_KEY_TYPE: RSA-2048
      RENEWAL_PERIOD_DAYS: '20'
      RENEWAL_TIME: '12'
      VULTR_API_KEY: ''
    volumes:
    - /var/lib/rancher:/var/lib/rancher
    - zertifikate:/etc/letsencrypt
    labels:
      io.rancher.container.agent.role: environment
      io.rancher.container.create_agent: 'true'
      service: letsencrypt

volumes:
  nextcloud:
    driver: rancher-nfs
  db:
    driver: rancher-nfs
  zertifikate:
    driver: local