version: '3.7'

services:
  proxy:
    build:
      context: ./proxy
      args:
        USER_UID: ${UID_PROXY:-12001}
        GROUP_UID: ${UID_PROXY:-12001}
    env_file:
      # contains DOMAINS and SERVER variable
      # DOMAINS: rootA.com www api\nrootB.com www mail
      # SERVER: webA webB
      - ./files/domains.env
    restart: always
    image: proxy
    container_name: proxy
    ports:
      - "9980:8080"
      - "9443:8443"
    networks:
      - service_web
      - service_certbot
      - backend_proxy
    volumes:
      # cert volume
      - proxy_ssl:/service/ssl:ro
      # /.well-known/acme-challenge/ volume
      - proxy_certbot:/service/html/certbot:ro
      # custom config mount
      # can be used to set custom locations for upstream server
      # has to have the same name as the upstream server to be loaded
      - ./files/upstream_configs:/upstream_configs:ro
  
  certbot:
    depends_on:
      - proxy
    build:
      context: ./certbot
      args:
        USER_UID: ${UID_CERTBOT:-12002}
        GROUP_UID: ${UID_PROXY:-12002}
    env_file:
      # contains DOMAINS and SERVER variable
      # DOMAINS: rootA.com www api\nrootB.com www mail
      # SERVER (not used by certbot): webA webB
      - ./files/domains.env
      # cerbot container will be set to testing
      # unless PRODUCTION var is set (any value) in the environment
      - ./production.env # set PRODUCTION= here
    restart: always
    image: certbot
    container_name: certbot
    networks:
      - service_certbot
    volumes:
      # cert volume
      - proxy_ssl:/service/ssl:rw
      # /.well-known/acme-challenge/ volume (webroot)
      - proxy_certbot:/service/html:rw
      # certbot directories
      - certbot_ssl:/service/letsencrypt/ssl:rw
      - certbot_work:/service/letsencrypt/work:rw
      - certbot_logs:/service/letsencrypt/log:rw

  # TODO: put this in its own docker-compose
  # as the proxy does not require it
  web:
    build:
      context: ./web
      args:
        USER_UID: ${UID_WEB:-12003}
        GROUP_UID: ${UID_WEB:-12003}
    restart: always
    image: web
    container_name: web
    networks:
      - service_web
#   volumes:
#     - service_web:/service/html:ro

volumes:
  # proxy volumes
  proxy_ssl:
    name: proxy_ssl
  proxy_certbot:
    name: proxy_certbot
  proxy_www:
    name: proxy_www
  # certbot volumes
  certbot_ssl:
    name: certbot_ssl
  certbot_work:
    name: certbot_work
  certbot_logs:
    name: certbot_logs
  # service volumes
  service_web:
    name: service_web

networks:
  service_web:
    name: service_web
  service_certbot:
    name: service_certbot
  backend_proxy:
    name: backend_proxy
    external: true