From fcfcff21ffc7fc59e72d9ac8d5aab6f63d2da22c Mon Sep 17 00:00:00 2001
From: Benson Chu <bensonchu457@gmail.com>
Date: Mon, 15 Apr 2024 21:00:58 -0500
Subject: [PATCH] Let there be light!

---
 .gitignore                     |  2 ++
 gitea/docker-compose.yml       | 55 ++++++++++++++++++++++++++++++++++
 nextcloud/docker-compose.yml   | 47 +++++++++++++++++++++++++++++
 vaultwarden/docker-compose.yml | 11 +++++++
 4 files changed, 115 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 gitea/docker-compose.yml
 create mode 100644 nextcloud/docker-compose.yml
 create mode 100644 vaultwarden/docker-compose.yml

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..ebd1ee4
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,2 @@
+*/*/*
+*/*.secrets.txt
\ No newline at end of file
diff --git a/gitea/docker-compose.yml b/gitea/docker-compose.yml
new file mode 100644
index 0000000..ba2c697
--- /dev/null
+++ b/gitea/docker-compose.yml
@@ -0,0 +1,55 @@
+version: "3"
+
+networks:
+  gitea:
+    external: false
+
+# volumes:
+#   gitea:
+#     driver: local
+
+services:
+  server:
+    image: gitea/gitea:1.21.7
+    container_name: gitea
+    environment:
+      - USER_UID=1000
+      - USER_GID=1000
+      - GITEA__database__DB_TYPE=postgres
+      - GITEA__database__HOST=db:2345
+      - GITEA__database__NAME=gitea
+      - GITEA__database__USER=gitea
+      - GITEA__database__PASSWD__FILE=/run/secrets/db_password
+    restart: always
+    networks:
+      - gitea
+    volumes:
+      - ./gitea:/data:z
+#      - gitea:/data:z
+      - /etc/timezone:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+    ports:
+      - "3000:3000"
+      - "2223:22"
+    depends_on:
+      - db
+    secrets:
+      - db_password
+
+  db:
+    image: postgres:14
+    restart: always
+    environment:
+      - POSTGRES_USER=gitea
+      - POSTGRES_PASSWORD_FILE=/run/secrets/db_password
+      - POSTGRES_DB=gitea
+    networks:
+      - gitea
+    volumes:
+      - ./postgres:/var/lib/postgresql/data:z
+    secrets:
+      - db_password
+
+secrets:
+   db_password:
+     file: ./db_password.secrets.txt
diff --git a/nextcloud/docker-compose.yml b/nextcloud/docker-compose.yml
new file mode 100644
index 0000000..f8d127c
--- /dev/null
+++ b/nextcloud/docker-compose.yml
@@ -0,0 +1,47 @@
+version: "3"
+
+services:
+  db:
+    image: mariadb:10.6
+    restart: always
+    command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
+    volumes:
+      - ./db:/var/lib/mysql:z
+    environment:
+      - MYSQL_ROOT_PASSWORD_FILE=/run/secrets/db_root_password
+      - MYSQL_PASSWORD_FILE=/run/secrets/db_password
+      - MYSQL_DATABASE=nextcloud
+      - MYSQL_USER=nextcloud
+    secrets:
+      - db_password
+      - db_root_password
+
+  app:
+    image: nextcloud
+    container_name: nextcloud
+    restart: always
+    environment:
+      - NEXTCLOUD_TRUSTED_DOMAINS="nextcloud.pestctrl.io"
+      - MYSQL_PASSWORD_FILE=/run/secrets/db_password
+      - MYSQL_DATABASE=nextcloud
+      - MYSQL_USER=nextcloud
+      - MYSQL_HOST=db
+    volumes:
+      - ./nextcloud:/var/www/html:z
+      - ./apps:/var/www/html/custom_apps:z
+      - ./config:/var/www/html/config:z
+      - ./data:/var/www/html/data:z
+      - ./mysql:/var/lib/mysql:z
+      - ./postgres:/var/lib/postgresql/data:z
+    ports:
+      - "5000:80"
+    links:
+      - db
+    secrets:
+      - db_password
+
+secrets:
+   db_password:
+     file: ./db_password.secrets.txt
+   db_root_password:
+     file: ./db_root_password.secrets.txt
diff --git a/vaultwarden/docker-compose.yml b/vaultwarden/docker-compose.yml
new file mode 100644
index 0000000..09ad5ed
--- /dev/null
+++ b/vaultwarden/docker-compose.yml
@@ -0,0 +1,11 @@
+version: "3"
+
+services:
+  server:
+    image: vaultwarden/server:latest
+    container_name: vault
+    restart: always
+    volumes:
+      - ./data:/data:z
+    ports:
+      - "4000:80"