version: "3.8"
services:
  app:
    #image: terrestris/projectsend:r1295
    image: linuxserver/projectsend:version-r1070
    networks:
      - proxy
      - internal
    #secrets:
    #  - db_password
    environment:
      - TZ=Europe/London
      - MAX_UPLOAD=5000
      - MAX_FILESIZE=5000
      #- DB_DRIVER=mysql
      #- DB_HOST=db:3306
      #- DB_NAME=projectsend
      #- DB_USER=projectsend
      #- DB_PASSWORD_FILE=/run/secrets/db_password
      #- SITE_LANG=English
    volumes:
      - projectsend_data:/data
      - projectsend_config:/config
    deploy:
      restart_policy:
        condition: on-failure
      labels:
        - "traefik.enable=true"
        - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=80"
        - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
        - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
        - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
        ## Redirect from EXTRA_DOMAINS to DOMAIN
        - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
        - "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
        - coop-cloud.${STACK_NAME}.app.version=version-r1070-c83960a0
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost"]
      interval: 30s
      timeout: 10s
      retries: 10
      start_period: 1m
  db:
    image: "mariadb:10.5"
    command: |
      mysqld --character-set-server=utf8mb4 --collation-server=utf8mb4_unicode_ci
    environment:
      - MYSQL_DATABASE=projectsend
      - MYSQL_USER=projectsend
      - MYSQL_PASSWORD_FILE=/run/secrets/db_password
      - MYSQL_ROOT_PASSWORD_FILE=/run/secrets/db_root_password
    secrets:
      - db_password
      - db_root_password
    volumes:
      - "mariadb:/var/lib/mysql"
    networks:
      - internal
    deploy:
      labels:
        - coop-cloud.${STACK_NAME}.db.version=10.5-9c681cef
networks:
  internal:
  proxy:
    external: true
secrets:
  db_password:
    name: ${STACK_NAME}_db_password_${SECRET_DB_PASSWORD_VERSION}
    external: true
  db_root_password:
    name: ${STACK_NAME}_db_root_password_${SECRET_DB_ROOT_PASSWORD_VERSION}
    external: true
volumes:
  mariadb:
  projectsend_data:
  projectsend_config: