version: "3.8"

services:
  app:
    build: .
    image: my_roundcube:1.6.0
    restart: unless-stopped
    depends_on:
      - db
    volumes:
      - ${DATA_PATH}/app:/var/www/html
      - ${DATA_PATH}/enigma:/etc/enigma/gnupg
    env_file: secrets/app.secrets
    environment:
      - ROUNDCUBEMAIL_SKIN=elastic
      - ROUNDCUBEMAIL_DEFAULT_HOST=tls://${MAIL_SERVER}
      - ROUNDCUBEMAIL_SMTP_SERVER=tls://${MAIL_SERVER}
      - ROUNDCUBEMAIL_PLUGINS=archive, zipdownload, enigma, carddav
    networks:
      - default
      - proxy
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=proxy"
      - "traefik.http.middlewares.rc-redirect-websecure.redirectscheme.scheme=https"
      - "traefik.http.routers.rc-http.middlewares=rc-redirect-websecure"
      - "traefik.http.routers.rc-http.rule=Host(`${CN}`)"
      - "traefik.http.routers.rc-http.entrypoints=web"
      - "traefik.http.routers.rc-https.rule=Host(`${CN}`)"
      - "traefik.http.routers.rc-https.entrypoints=websecure"
      - "traefik.http.routers.rc-https.tls=true"
      - "traefik.http.routers.rc-https.tls.certresolver=myhttpchallenge"
      - "co.elastic.logs/module=apache"
      - "co.elastic.logs/fileset=access"

  db:
    image: mariadb:10.5
    restart: unless-stopped
    volumes:
      - ${DATA_PATH}/db:/var/lib/mysql
    env_file: secrets/db.secrets
    labels:
      - "co.elastic.logs/module=mysql"

networks:
  proxy:
    external: true