# sandy (cloud.delmar.bzh)
---
networks:
 nextcloud:

volumes:
  html:
   name: nextcloud_html
   external: true
  mariadb:
    name: nextcloud_mariadb
    external: true
  redis:
    name: nextcloud_redis

services:
  app:
    container_name: nextcloud
    build:
      context: .
      dockerfile: Dockerfile
    depends_on:
      - mariadb
      - redis
    devices:
      - /dev/dri:/dev/dri
    environment:
      NEXTCLOUD_TRUSTED_DOMAINS: cloud.delmar.bzh
      NEXTCLOUD_DATA_DIR: /srv/nextcloud/data
      MYSQL_DATABASE: nextcloud
      MYSQL_USER: nextcloud
      MYSQL_PASSWORD: rehire-thrill-curtain
      MYSQL_HOST: nextcloud-mariadb
      REDIS_HOST: nextcloud-redis
      NEXTCLOUD_ENABLE_DRI_DEVICE: true
      PHP_MEMORY_LIMIT: 4G
      PHP_MAX_EXECUTION_TIME: 7200
      PHP_OPCACHE_MEMORY_CONSUMPTION: 256
      UPLOAD_LIMIT: 10G
      PHP_POST_MAX_SIZE: 10G
      TZ: Europe/Paris
    extra_hosts:
      - cloud.delmar.bzh:192.168.1.14
      - office.delmar.bzh:192.168.1.14
    volumes:
      - html:/var/www/html
      - /nfs/cloud:/srv/nextcloud/data
      - type: tmpfs
        target: /tmp:exec
    ports:
      - 35771:80
    networks:
      - nextcloud
    restart: unless-stopped
    labels:
      - "dockpeek.link=https://cloud.delmar.bzh"
      - "dockpeek.tags=frontend,production"

  nextcloud-cron:
    container_name: nextcloud-cron
    image: nextcloud
    depends_on:
      - app
    entrypoint: /cron.sh
    environment:
      NEXTCLOUD_TRUSTED_DOMAINS: cloud.delmar.bzh
      NEXTCLOUD_DATA_DIR: /srv/nextcloud/data
      MYSQL_DATABASE: nextcloud
      MYSQL_USER: nextcloud
      MYSQL_PASSWORD: rehire-thrill-curtain
      MYSQL_HOST: nextcloud-mariadb
      REDIS_HOST: nextcloud-redis
      TZ: Europe/Paris
    volumes:
      - html:/var/www/html
      - /nfs/cloud:/srv/nextcloud/data
    networks:
      - nextcloud
    restart: unless-stopped
    labels:
      - "dockpeek.tags=backend,maintenance,production"

  mariadb:
    container_name: nextcloud-mariadb
    image: mariadb:11.4-ubi
    environment:
      MYSQL_ROOT_PASSWORD: transatlantique
      MYSQL_PASSWORD: rehire-thrill-curtain
      MYSQL_DATABASE: nextcloud
      MYSQL_USER: nextcloud
      TZ: Europe/Paris
    volumes:
      - mariadb:/var/lib/mysql
    networks:
      - nextcloud
    restart: unless-stopped
    labels:
      - "dockpeek.tags=backend,database,production"

  adminer:
    container_name: nextcloud-adminer
    image: adminer
    environment:
      ADMINER_DEFAULT_SERVER: mariadb
    depends_on:
      - mariadb
    ports:
      - 62764:8080
    networks:
      - nextcloud
    restart: unless-stopped
    labels:
      - "dockpeek.tags=backend,database,administration,production"

  redis:
    container_name: nextcloud-redis
    image: valkey/valkey
    volumes:
      - redis:/data
    networks:
      - nextcloud
    restart: unless-stopped
    labels:
      - "dockpeek.tags=backend,broker,production"

  coturn:
    container_name: nextcloud-coturn
    image: coturn/coturn
    command:
      - "--realm"
      - "cloud.delmar.bzh"
      - "--static-auth-secret"
      - "rehire-thrill-curtain"
      - "--no-stdout-log"
      - "--log-file"
      - "stdout"
      - "--stale-nonce=600"
      - "--use-auth-secret"
      - "--server-name=nextcloud-coturn "
      - "--lt-cred-mech"
      - "--fingerprint"
      - "--no-software-attribute"
      - "--no-multicast-peers"
      # - "--listening-ip=0.0.0.0 "
      # - "--external-ip=192.168.1.14"
      # - "--listening-port=3478"
      # - "--min-port=49160"
      # - "--max-port=49200"
    ports:
      - 3478:3478
      - 49160-49200:49160-49200/udp
    # network_mode: host
    networks:
      - nextcloud
    restart: unless-stopped
    labels:
      - "dockpeek.tags=backend,gateway,production"