name: opencloud

services:
  opencloud:
    image: opencloudeu/opencloud-rolling:latest
    container_name: opencloud
    restart: unless-stopped
    command: ["server"]
    environment:
      - OC_URL=https://cloud.krilio.net
      - OC_LOG_LEVEL=error
      - OC_INSECURE=false
      - PROXY_TLS=false
      - PROXY_HTTP_ADDR=0.0.0.0:9200
      - INITIAL_ADMIN_PASSWORD=dVnzfCKamzuv1RluijV1l59uU/mwtW9O
      - COLLABORATION_WOPI_SRC=https://wopiserver.krilio.net
      - COLLABORATION_WOPI_SECRET=32522ab288fd6c77bee76d7d304443c5cdbf6a83e007754f62398194a766040f
      - OC_WOPI_SECRET=32522ab288fd6c77bee76d7d304443c5cdbf6a83e007754f62398194a766040f
      - OC_ADD_RUN_SERVICES=collaboration
      - APP_REGISTRY_MIMETYPES_JSON=[{"mime_type":"application/vnd.oasis.opendocument.text","extension":"odt","name":"OpenDocument Text","description":"OpenDocument Text","icon":"","default_app":"Collabora","allow_creation":true},{"mime_type":"application/vnd.oasis.opendocument.spreadsheet","extension":"ods","name":"OpenDocument Spreadsheet","description":"OpenDocument Spreadsheet","icon":"","default_app":"Collabora","allow_creation":true},{"mime_type":"application/vnd.oasis.opendocument.presentation","extension":"odp","name":"OpenDocument Presentation","description":"OpenDocument Presentation","icon":"","default_app":"Collabora","allow_creation":true}]
      - COLLABORATION_APP_NAME=Collabora
      - COLLABORATION_APP_PRODUCT=Collabora
      - COLLABORATION_APP_ICON=image-edit
      - COLLABORATION_APP_DESCRIPTION=Collabora Online
      - COLLABORATION_APP_ADDR=https://collabora.krilio.net
      - PROXY_CSP_CONFIG_FILE_LOCATION=/etc/opencloud/csp.yaml
      - COLLABORATION_HTTP_ADDR=0.0.0.0:9300
      - COLLABORATION_APP_PROOF_DISABLE=true
    volumes:
      - /mnt/truenas/services/opencloud:/var/lib/opencloud
      - opencloud_config:/etc/opencloud
      - /etc/localtime:/etc/localtime:ro
    networks:
      - traefik
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.opencloud.rule=Host(`cloud.krilio.net`) || Host(`cloud.lan.krilio.net`)"
      - "traefik.http.routers.opencloud.tls.certresolver=cloudflare"
      - "traefik.http.routers.opencloud.service=opencloud"
      - "traefik.http.services.opencloud.loadbalancer.server.port=9200"
      - "traefik.http.routers.wopiserver.rule=Host(`wopiserver.krilio.net`)"
      - "traefik.http.routers.wopiserver.tls.certresolver=cloudflare"
      - "traefik.http.routers.wopiserver.service=wopiserver"
      - "traefik.http.services.wopiserver.loadbalancer.server.port=9300"     

  collabora:
    image: collabora/code:latest
    container_name: collabora
    restart: unless-stopped
    environment:
      - DONT_GEN_SSL_CERT=YES
      - extra_params=--o:ssl.enable=false --o:ssl.termination=true --o:net.frame_ancestors=https://cloud.krilio.net
      - server_name=collabora.krilio.net
      - aliasgroup1=https://cloud.krilio.net
      - aliasgroup2=https://wopiserver.krilio.net
    networks:
      - traefik
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.collabora.rule=Host(`collabora.krilio.net`)"
      - "traefik.http.routers.collabora.tls.certresolver=cloudflare"
      - "traefik.http.services.collabora.loadbalancer.server.port=9980"
      - "traefik.http.middlewares.collabora-ws.headers.customrequestheaders.X-Forwarded-Proto=https"
      - "traefik.http.routers.collabora.middlewares=collabora-ws"
      - "traefik.http.middlewares.collabora-ws.headers.customrequestheaders.Upgrade=websocket"
      - "traefik.http.middlewares.collabora-ws.headers.customrequestheaders.Connection=Upgrade"
    extra_hosts:
      - "wopiserver.krilio.net:10.0.0.210"
      - "cloud.krilio.net:10.0.0.210"

networks:
  traefik:
    external: true

volumes:
  opencloud_config:
    external: true