version: "3.8"

services:
  app:
    build: .
    image: my_roundcube:latest
    restart: unless-stopped
    depends_on:
      - db
    volumes:
      - ${DATA_PATH}/app:/var/www/html
      - ${DATA_PATH}/enigma:/etc/enigma/gnupg
    env_file: secrets/app.secrets
    environment:
      - ROUNDCUBEMAIL_SKIN=elastic
      - ROUNDCUBEMAIL_DEFAULT_HOST=ssl://${MAIL_SERVER}
      - ROUNDCUBEMAIL_SMTP_SERVER=ssl://${MAIL_SERVER}
      - ROUNDCUBEMAIL_SMTP_PORT=465
      - ROUNDCUBEMAIL_DEFAULT_PORT=993
      - ROUNDCUBEMAIL_PLUGINS=archive, zipdownload, enigma, carddav
    networks:
      - default
      - proxy
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=proxy"
      - "traefik.http.routers.rc.entrypoints=websecure"
      - "traefik.http.routers.rc.rule=Host(`${CN}`)"
      - "co.elastic.logs/module=apache"
      - "co.elastic.logs/fileset=access"

  db:
    image: mariadb:10.5
    restart: unless-stopped
    volumes:
      - ${DATA_PATH}/db:/var/lib/mysql
    env_file: secrets/db.secrets
    labels:
      - "co.elastic.logs/module=mysql"

networks:
  proxy:
    external: true