version: "3"

secrets:
  config_json_foundry:
    file: foundry_secrets.json
  oauth_client_id:
    file: ./secrets/OAUTH_CLIENT_ID
  oauth_client_secret:
    file: ./secrets/OAUTH_CLIENT_SECRET

services:
    yacht:
      container_name: yacht
      image: selfhostedpro/yacht
      hostname: yacht
      volumes:
        - /var/run/docker.sock:/var/run/docker.sock
        - ../home/yacht:/config
      environment:
          TZ: "America/Chicago"
          UID: 33
          GID: 33
          DISABLE_AUTH: true
      networks:
        - internal
    nginx:
        container_name: nginx
        image: nginx
        hostname: nginx
        volumes:
          - type: bind
            source: ../home/html
            target: /var/www/html
          - type: bind
            source: ../home/nginx/conf.d
            target: /etc/nginx/conf.d
            read_only: true
          - type: bind
            source: ../home/nginx/nginx.conf
            target: /etc/nginx/nginx.conf
          - type: bind
            source: ../home/nginx/applications
            target: /etc/nginx/applications
          - type: bind
            source: ../home/nginx/certs
            target: /etc/nginx/certs
          - type: bind
            source: ../home/certbot/www
            target: /var/www/certbot
            read_only: true
          - type: bind
            source: ../home/certbot/conf
            target: /etc/nginx/ssl
            read_only: true
          - type: bind
            source: ../home/dir2cast
            target: /var/www/dir2cast
            read_only: true
        environment:
          TZ: "America/Chicago"
          UID: 33
          GID: 33
        ports:
          - "80:80"
          - "443:443"
        networks:
          - internal
    certbot:
      container_name: certbot
      image: certbot/certbot:latest
      volumes:
        - type: bind
          source: ../home/certbot/www
          target: /var/www/certbot
        - type: bind
          source: ../home/certbot/conf
          target: /etc/letsencrypt
    php:
        container_name: php
        image: php:7.0-fpm  
        hostname: php
        volumes:
          - type: bind
            source: ../home/html
            target: /var/www/html
          - type: bind
            source: ../home/dir2cast
            target: /var/www/dir2cast
        environment:
          TZ: "America/Chicago"
          UID: 33
          GID: 33
        networks:
          - internal       
    filebrowser:
        container_name: filebrowser
        image: filebrowser/filebrowser
        hostname: filebrowser
        volumes:
          - type: bind
            source: ../home/filebrowser/srv
            target: /srv
          - type: bind
            source: ../home/filebrowser/database.db
            target: /database.db
          - type: bind
            source: ../home/filebrowser/filebrowser.json
            target: /.filebrowser.json
          - type: bind
            source: ../home/foundry/Data
            target: /home/foundry/Data
        environment:
          TZ: "America/Chicago"
          UID: 33
          GID: 33
        networks:
          - internal
    foundry:
        container_name: foundry
        image: felddy/foundryvtt:release
        hostname: foundry
        init: true
        volumes:
          - type: bind
            source: ../home/foundry
            target: /data
        environment:
          TZ: "America/Chicago"
          FOUNDRY_ROUTE_PREFIX: "foundry"
          FOUNDRY_UID: 33
          FOUNDRY_GID: 33
          FOUNDRY_PROXY_SSL: true
          FOUNDRY_PROXY_PORT: 9090
        secrets:
          - source: config_json_foundry
            target: config.json
        networks:
          - internal
    vouch:
        container_name: vouch
        image: quay.io/vouch/vouch-proxy
        environment:
          TZ: "America/Chicago"
          UID: 33
          GID: 33
        volumes:
            - type: bind
              source: ../home/vouch/config.yml
              target: /config/config.yml
        networks:
          - internal 
networks:
  internal:
    driver: bridge