version: "3.7"

services:
  nginx:
    image: docker.io/nginxproxy/nginx-proxy:latest
    container_name: nginx
    networks:
      - internal_network
      - external_network
    dns:
      - 89.32.32.32
    ports:
      - "80:80"
      - "443:443"
    labels:
      com.github.jrcs.letsencrypt_nginx_proxy_companion.nginx_proxy: "true"
    volumes:
      - /opt/portal/nginx/certs:/etc/nginx/certs:ro
      - /opt/portal/nginx/conf:/etc/nginx/conf.d
      - /opt/portal/nginx/dhparam:/etc/nginx/dhparam
      - /opt/portal/nginx/html:/usr/share/nginx/html
      - /opt/portal/nginx/vhost:/etc/nginx/vhost.d
      - /var/run/docker.sock:/tmp/docker.sock:ro
    environment:
      - ENABLE_IPV6=true
    restart: unless-stopped

  acme:
    image: docker.io/nginxproxy/acme-companion:latest
    container_name: acme
    networks:
      - external_network
    dns:
      - 89.32.32.32
    volumes:
      - /opt/portal/nginx/acme:/etc/acme.sh
      - /opt/portal/nginx/certs:/etc/nginx/certs:rw
      - /opt/portal/nginx/conf:/etc/nginx/conf.d
      - /opt/portal/nginx/dhparam:/etc/nginx/dhparam
      - /opt/portal/nginx/html:/usr/share/nginx/html
      - /opt/portal/nginx/vhost:/etc/nginx/vhost.d:rw
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      - NGINX_PROXY_CONTAINER=nginx
      - DEFAULT_EMAIL=noc@sunet.se
    depends_on:
      - nginx
    restart: unless-stopped

  portal:
    image: docker.sunet.se/drive/portal:<%= @portal_version %>
    container_name: portal
    restart: always
    networks:
      - internal_network
    ports:
      - "127.0.0.1:8080:8080"
    dns:
      - 89.32.32.32
    volumes:
      - /opt/portal/config.yaml:/app/config.yaml
    environment:
      - VIRTUAL_HOST=portal/<%= @domain %>
      - VIRTUAL_PATH=/
      - VIRTUAL_PORT=8080
      - LETSENCRYPT_HOST=portal.<%= @domain %>

networks:
  external_network:
  internal_network:
    internal: true