---
services:

  db:

    image: ${DOCKER_REGISTRY:-}mysql:8.0
    volumes:
      - /share/docker_data/semaphore/mysql/data:/var/lib/mysql
    environment:
      MYSQL_RANDOM_ROOT_PASSWORD: 'yes'
      MYSQL_DATABASE: semaphore_db
      MYSQL_USER: semaphore_user
      MYSQL_PASSWORD: StrongPassw0rd
    restart: ${RESTART:-unless-stopped}
  app:

    ports:
      - 3002:3000
    
    #image: semaphoreui/semaphore:latest
    image: ${DOCKER_REGISTRY:-}semaphoreui/semaphore:latest
    dns:
      - 192.168.77.101
      - 192.168.77.1
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /share/docker_data/semaphore/app/:/etc/semaphore/
    environment:
      TZ: Europe/Bratislava
      SEMAPHORE_DB_USER: semaphore_user
      SEMAPHORE_DB_PASS: StrongPassw0rd
      SEMAPHORE_DB_HOST: db
      SEMAPHORE_DB_PORT: 3306
      SEMAPHORE_DB: semaphore_db  
      SEMAPHORE_PLAYBOOK_PATH: /tmp/semaphore/
      SEMAPHORE_ADMIN_PASSWORD: $SEMAPHORE_ADMIN_PASSWORD
      SEMAPHORE_ADMIN_NAME: administrator
      SEMAPHORE_ADMIN_EMAIL: administrator@sectorq.eu
      SEMAPHORE_ADMIN: administrator
      SEMAPHORE_ACCESS_KEY_ENCRYPTION: MflCLIUF5bn6Lgkuwy4BoAdIFhoZ4Ief2oocXmuZSjs=
      SEMAPHORE_LDAP_ACTIVATED: 'no' # if you wish to use ldap, set to: 'yes' 
      SEMAPHORE_LDAP_HOST: '192.168.77.101'
      SEMAPHORE_LDAP_PORT: '2389'
      SEMAPHORE_LDAP_NEEDTLS: 'no'
      SEMAPHORE_LDAP_DN_BIND: 'cn=jaydee,ou=users,dc=sectorq,dc=eu'
      SEMAPHORE_LDAP_PASSWORD: '$LDAP_ADMIN_PASSWORD'
      SEMAPHORE_LDAP_DN_SEARCH: 'dc=sectorq,dc=eu'
      SEMAPHORE_LDAP_SEARCH_FILTER: "(&(objectClass=inetOrgPerson)(uid=%s))"
      
    labels:
      com.centurylinklabs.watchtower.enable: true 
    depends_on:
      - db
    restart: ${RESTART:-unless-stopped}
    mem_limit: 1g