name: servnest
services:
  tor:
    image: a.invalid/servnest/tor
    extends:
      file: base.yaml
      service: base
    build:
      dockerfile: tor.Containerfile
    volumes:
      - ./conf/torrc:/etc/tor/torrc:ro
      - ./data/tor-config/:/srv/servnest/tor-config/:ro
      - ./data/tor-keys/:/srv/servnest/tor-keys/:rw
      - ./sock/tor-client/:/run/tor-client/:rw
      - ./sock/tor-control/:/run/tor-control/:rw
      - ./sock/nginx-onion/:/run/nginx-onion/:rw
      - ./tmp/tor/:/var/lib/tor/:rw
    mem_limit: 128m
    networks:
      snet:
        ipv4_address: 10.5.0.59
  sftpgo:
    image: a.invalid/servnest/sftpgo
    extends:
      file: base.yaml
      service: base
    build:
      dockerfile: sftpgo.Containerfile
      args:
        SFTPGO_VERSION: $SFTPGO_VERSION
    ports:
      - "[::1]:42022:42022/tcp"
    volumes:
      - ./conf/sftpgo.toml:/etc/sftpgo/sftpgo.toml:ro
      - ./data/ht/fs/:/srv/servnest/ht/fs/:rw
      - ./logs/sftpgo/:/var/log/sftpgo/:rw
    mem_limit: 256mb
    networks:
      snet:
        ipv4_address: 10.5.0.58
  knot:
    image: a.invalid/servnest/knot
    extends:
      file: base.yaml
      service: base
    build:
      dockerfile: knot.Containerfile
    ports:
      - "[::1]:42053:42053/udp"
      - "[::1]:42053:42053/tcp"
      - "[::1]:42853:42853/udp"
    volumes:
      - ./data/reg/:/srv/servnest/reg/:rw
      - ./data/ns/:/srv/servnest/ns/:rw
      - ./data/knot/:/var/lib/knot/:rw
      - ./logs/knot/:/var/log/knot/:rw
      - ./sock/knot/:/run/knot/:rw
    networks:
      snet:
        ipv4_address: 10.5.0.51
  knot-secondary:
    image: a.invalid/servnest/knot-secondary
    extends:
      file: base.yaml
      service: base
    build:
      dockerfile: knot.Containerfile
    ports:
      - "[::1]:42054:42053/udp"
      - "[::1]:42054:42053/tcp"
      - "[::1]:42854:42853/udp"
    volumes:
      - ./data/knot-secondary/:/var/lib/knot/:rw
      - ./logs/knot-secondary/:/var/log/knot/:rw
      - ./sock/knot-secondary/:/run/knot/:rw
    profiles:
      - secondary
    networks:
      snet:
        ipv4_address: 10.5.0.52
  apache:
    image: a.invalid/servnest/apache
    extends:
      file: base.yaml
      service: base
    build:
      dockerfile: apache.Containerfile
    volumes:
      - ./conf/apache/:/etc/apache2/:ro
      - ./conf/http-messages/:/srv/servnest/ht/http-messages/:ro
      - ./data/ht/:/srv/servnest/ht/:ro
      - ./logs/apache/:/var/log/apache2/:rw
      - ./tmp/apache/:/run/apache2/:rw
    networks:
      snet:
        ipv4_address: 10.5.0.57
  core:
    image: a.invalid/servnest/core
    extends:
      file: base.yaml
      service: php
    networks:
      snet:
        ipv4_address: 10.5.0.54
  cronie:
    image: a.invalid/servnest/cronie
    extends:
      file: base.yaml
      service: php
    build:
      dockerfile: cronie.Containerfile
    volumes:
      - ./conf/cronie:/etc/cron.d/servnest:ro
      - ./logs/cronie/:/var/log/cronie/:rw
      - ./tmp/cronie/:/var/run/:rw
    networks:
      snet:
        ipv4_address: 10.5.0.55
  nginx:
    image: a.invalid/servnest/nginx
    extends:
      file: base.yaml
      service: base
    build:
      dockerfile: nginx.Containerfile
    ports:
      - "[::1]:42080:42080/tcp"
      - "[::1]:42443:42443/tcp"
    volumes:
      - ./core/:/srv/servnest/core/:ro
      - ./conf/nginx/:/etc/nginx/:ro
      - ./data/certbot/live/:/etc/letsencrypt/live/:ro
      - ./data/certbot/archive/:/etc/letsencrypt/archive/:ro
      - ./sock/php/:/run/php-fpm/:rw
      - ./sock/nginx-onion/:/run/nginx-onion/:rw
      - ./logs/nginx/:/var/lib/nginx/logs/:rw
      - ./tmp/nginx/:/var/lib/nginx/tmp/:rw
      - ./tmp/nginx-run/:/run/nginx/:rw
      - ./tmp/acme/:/srv/servnest/acme/:ro
    networks:
      snet:
        ipv4_address: 10.5.0.56
  nsd:
    image: a.invalid/servnest/nsd
    extends:
      file: base.yaml
      service: base
    build:
      dockerfile: nsd.Containerfile
    ports:
      - "[::1]:42055:42053/udp"
      - "[::1]:42055:42053/tcp"
    volumes:
      - ./conf/nsd.conf:/etc/nsd/nsd.conf:ro
      - ./data/nsd/:/var/lib/nsd/:rw
      - ./tmp/nsd-run/:/run/:rw
      - ./tmp/nsd/:/var/db/nsd/:rw
    mem_limit: 48mb
    profiles:
      - secondary
    networks:
      snet:
        ipv4_address: 10.5.0.53
networks:
  snet:
    enable_ipv6: true
    driver: bridge
    ipam:
      config:
      - subnet: 10.5.0.0/16
        gateway: 10.5.0.1