116 lines
4.1 KiB
YAML
116 lines
4.1 KiB
YAML
services:
|
|
nextcloud_db:
|
|
container_name: nextcloud_db
|
|
image: docker.io/library/postgres:17.5
|
|
restart: unless-stopped
|
|
environment:
|
|
- POSTGRES_USER=${POSTGRES_USER}
|
|
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
|
- POSTGRES_DB=${POSTGRES_DB}
|
|
volumes:
|
|
- ${APPDATA_PATH}/nextcloud/db:/var/lib/postgresql/data
|
|
ports:
|
|
- ${DB_PORT}:5432
|
|
networks:
|
|
- backend
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -d ${POSTGRES_DB} -U ${POSTGRES_USER}"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
|
|
nextcloud_valkey:
|
|
container_name: nextcloud_valkey
|
|
image: docker.io/valkey/valkey:8.1.3
|
|
restart: unless-stopped
|
|
command: valkey-server --save 60 1 --requirepass ${VALKEY_PASSWORD}
|
|
volumes:
|
|
- ${APPDATA_PATH}/nextcloud/valkey:/data
|
|
ports:
|
|
- ${VALKEY_PORT}:6379
|
|
networks:
|
|
- backend
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "echo 'auth ${VALKEY_PASSWORD}\nping' | valkey-cli | grep PONG"]
|
|
interval: 10s
|
|
timeout: 5s
|
|
retries: 3
|
|
start_period: 10s
|
|
|
|
nextcloud_app:
|
|
image: docker.io/library/nextcloud:31.0.7
|
|
container_name: nextcloud_app
|
|
restart: unless-stopped
|
|
depends_on:
|
|
nextcloud_db:
|
|
condition: service_healthy
|
|
nextcloud_valkey:
|
|
condition: service_healthy
|
|
labels:
|
|
- traefik.enable=true
|
|
- traefik.http.routers.nextcloud.rule=Host(`${TRAEFIK_DOMAIN}`)
|
|
- traefik.http.routers.nextcloud.entrypoints=websecure-external
|
|
- traefik.http.services.nextcloud.loadbalancer.server.port=80
|
|
- traefik.http.services.nextcloud.loadbalancer.passhostheader=true
|
|
- traefik.http.routers.nextcloud.middlewares=nextcloud-redirectregex1,nextcloud-redirectregex2,compresstraefik,nextcloud-securityheaders
|
|
- traefik.http.middlewares.compresstraefik.compress=true
|
|
- traefik.http.middlewares.nextcloud-redirectregex1.redirectregex.permanent=true
|
|
- traefik.http.middlewares.nextcloud-redirectregex1.redirectregex.regex=https?://([^/]*)/.well-known/(card|cal)dav
|
|
- traefik.http.middlewares.nextcloud-redirectregex1.redirectregex.replacement=https://$${1}/remote.php/dav/
|
|
- traefik.http.middlewares.nextcloud-redirectregex2.redirectregex.permanent=true
|
|
- traefik.http.middlewares.nextcloud-redirectregex2.redirectregex.regex=https?://([^/]*)(/.well-known[^#]*)
|
|
- traefik.http.middlewares.nextcloud-redirectregex2.redirectregex.replacement=https://$${1}/index.php$${2}
|
|
- traefik.http.middlewares.nextcloud-securityheaders.headers.stsSeconds=15552000
|
|
- traefik.http.middlewares.nextcloud-securityheaders.headers.stsIncludeSubdomains=true
|
|
- traefik.http.middlewares.nextcloud-securityheaders.headers.stsPreload=true
|
|
- traefik.docker.network=frontend
|
|
environment:
|
|
- POSTGRES_HOST=nextcloud_db:5432
|
|
- POSTGRES_DB=${POSTGRES_DB}
|
|
- POSTGRES_USER=${POSTGRES_USER}
|
|
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
|
- REDIS_HOST=nextcloud_valkey
|
|
- REDIS_HOST_PORT=6379
|
|
- REDIS_HOST_PASSWORD=${VALKEY_PASSWORD}
|
|
- PHP_MEMORY_LIMIT=${PHP_MEMORY_LIMIT}
|
|
- PHP_UPLOAD_LIMIT=${PHP_UPLOAD_LIMIT}
|
|
- APACHE_DISABLE_REWRITE_IP=${APACHE_DISABLE_REWRITE_IP}
|
|
volumes:
|
|
- ${APPDATA_PATH}/nextcloud/app:/var/www/html
|
|
ports:
|
|
- ${APP_PORT}:80
|
|
networks:
|
|
- frontend
|
|
- backend
|
|
|
|
nextcloud_cron:
|
|
image: docker.io/library/nextcloud:31.0.7
|
|
container_name: nextcloud_cron
|
|
restart: unless-stopped
|
|
depends_on:
|
|
- nextcloud_app
|
|
entrypoint: /cron.sh
|
|
environment:
|
|
- POSTGRES_HOST=nextcloud_db:5432
|
|
- POSTGRES_DB=${POSTGRES_DB}
|
|
- POSTGRES_USER=${POSTGRES_USER}
|
|
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
|
- REDIS_HOST=nextcloud_valkey
|
|
- REDIS_HOST_PORT=6379
|
|
- REDIS_HOST_PASSWORD=${VALKEY_PASSWORD}
|
|
- PHP_MEMORY_LIMIT=${PHP_MEMORY_LIMIT}
|
|
- PHP_UPLOAD_LIMIT=${PHP_UPLOAD_LIMIT}
|
|
- APACHE_DISABLE_REWRITE_IP=${APACHE_DISABLE_REWRITE_IP}
|
|
volumes:
|
|
- ${APPDATA_PATH}/nextcloud/app:/var/www/html
|
|
networks:
|
|
- frontend
|
|
- backend
|
|
|
|
networks:
|
|
frontend:
|
|
external: true
|
|
backend:
|
|
external: true
|