services:
  db:
    image: mariadb:10.5
    command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
    restart: unless-stopped
    volumes:
      - {{nextcloud_data_dir}}/nextcloud-db:/var/lib/mysql
    environment:
      - MYSQL_ROOT_PASSWORD={{ lookup('community.general.onepassword', 'x5jporz6fguqsm4dmwrb6juua4', vault='j7nmhqlsjmp2r6umly5t75hzb4', field='MYSQL_ROOT_PASSWORD') }}
      - MYSQL_PASSWORD={{ lookup('community.general.onepassword', 'x5jporz6fguqsm4dmwrb6juua4', vault='j7nmhqlsjmp2r6umly5t75hzb4', field='MYSQL_PASSWORD') }}
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
    networks:
      - nextcloud

  nextcloud:
    image: nextcloud
    restart: unless-stopped
    depends_on:
      - db
    links:
      - db
    volumes:
      - {{nextcloud_data_dir}}/nextcloud-data:/var/www/html
    environment:
      - MYSQL_PASSWORD={{ lookup('community.general.onepassword', 'x5jporz6fguqsm4dmwrb6juua4', vault='j7nmhqlsjmp2r6umly5t75hzb4', field='MYSQL_PASSWORD') }}
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
      - MYSQL_HOST=db
      - OBJECTSTORE_S3_BUCKET=nextcloud
      - OBJECTSTORE_S3_KEY={{hetzner_access_key}}
      - OBJECTSTORE_S3_SECRET={{hetzner_secret_key}}
      - OBJECTSTORE_S3_HOST=mvl-sh.hel1.your-objectstorage.com
      - OBJECTSTORE_S3_PORT=443
      - OBJECTSTORE_S3_SSL=true
      - OBJECTSTORE_S3_USEPATH_STYLE=true
      - OBJECTSTORE_S3_AUTOCREATE=true
      - NEXTCLOUD_ADMIN_USER={{ lookup('community.general.onepassword', 'x5jporz6fguqsm4dmwrb6juua4', vault='j7nmhqlsjmp2r6umly5t75hzb4', field='username') }}
      - NEXTCLOUD_ADMIN_PASSWORD={{ lookup('community.general.onepassword', 'x5jporz6fguqsm4dmwrb6juua4', vault='j7nmhqlsjmp2r6umly5t75hzb4', field='password') }}
      - TRUSTED_PROXIES=172.20.0.0/24
    networks:
      - caddy_network
      - nextcloud

  collabora:
    image: collabora/code:latest
    restart: always
    environment:
      - username={{collabora_user}}
      - password={{collabora_pass}}
      - domain=cloud\.mvl\.sh|cloud\.vleeuwen\.me
      - dictionaries=en nl du fr
      - extra_params=--o:ssl.enable=false --o:ssl.termination=true
    ports:
      - 9980:9980    
    networks:
      - caddy_network
      - nextcloud

networks:
  nextcloud:
  caddy_network:
    external: true
    name: caddy_default