networks:
  nextcloud_network:
    ipam:
      config:
      - subnet: 192.168.80.0/28
      driver: default
  pihole_pihole:
    external: true
services:
  app:
    dns:
    - 192.168.78.254
    env_file:
    - stack.env
    image: ${DOCKER_REGISTRY:-}nextcloud:latest
    links:
    - db
    networks:
    - nextcloud_network
    - pihole_pihole
    ports:
    - target: 80
      published: 8134
      protocol: tcp
      mode: ingress
    volumes:
    - data:/var/www/html
    - pre-installation:/docker-entrypoint-hooks.d/pre-installation
    - post-installation:/docker-entrypoint-hooks.d/post-installation
    - pre-upgrade:/docker-entrypoint-hooks.d/pre-upgrade
    - post-upgrade:/docker-entrypoint-hooks.d/post-upgrade
    - before-starting:/docker-entrypoint-hooks.d/before-starting
    deploy:
      labels:
        com.centurylinklabs.watchtower.enable: 'true'
        com.centurylinklabs.watchtower.lifecycle.post-update: apt update;apt install
          -y smbclient;chown -R www-data:www-data /var/www/html
        homepage.container: nextcloud-app-1
        homepage.description: Cloud server
        homepage.group: Infrastructure
        homepage.href: https://nc.sectorq.eu
        homepage.icon: ${APPNAME}.png
        homepage.name: Nextcloud
        homepage.server: my-docker-swarm
        homepage.widget.password: oGeiy-tTc8p-LJdt5-na3JF-dbWpY
        homepage.widget.type: ${APPNAME}
        homepage.widget.url: https://nc.sectorq.eu
        homepage.widget.username: jaydee
        wud.watch: 'true'
        wud.watch.digest: 'true'
      replicas: 1
      placement:
        constraints:
        - node.role == manager
  db:
    command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW --innodb-file-per-table=1
      --skip-innodb-read-only-compressed
    env_file:
    - stack.env
    image: ${DOCKER_REGISTRY:-}yobasystems/alpine-mariadb:latest
    networks:
    - nextcloud_network
    volumes:
    - mariadb:/var/lib/mysql
    - /etc/localtime:/etc/localtime
    deploy:
      labels:
        com.centurylinklabs.watchtower.enable: 'true'
        wud.watch: 'true'
        wud.watch.digest: 'true'
      replicas: 1
      placement:
        constraints:
        - node.role == manager
  redis:
    image: ${DOCKER_REGISTRY:-}redis:alpine
    networks:
    - nextcloud_network
    volumes:
    - redis:/data
    deploy:
      labels:
        wud.watch: 'true'
        wud.watch.digest: 'true'
      replicas: 1
      placement:
        constraints:
        - node.role == manager
  appapi-harp:
    environment:
      HP_SHARED_KEY: l4c1j4yd33Du5lo
      NC_INSTANCE_URL: https://nc.sectorq.eu
    volumes:
    - /var/run/docker.sock:/var/run/docker.sock
    - certs:/certs
    hostname: appapi-harp
    ports:
    - target: 8780
      published: 8780
      protocol: tcp
      mode: ingress
    - target: 8782
      published: 8782
      protocol: tcp
      mode: ingress
    image: ${DOCKER_REGISTRY:-}ghcr.io/nextcloud/nextcloud-appapi-harp:release
    networks:
    - nextcloud_network
    deploy:
      labels:
        wud.watch: 'true'
        wud.watch.digest: 'true'
      replicas: 1
      placement:
        constraints:
        - node.role == manager
volumes:
  data:
  pre-installation:
  post-installation:
  pre-upgrade:
  post-upgrade:
  before-starting:
  mariadb:
  redis:
  certs: