version: "3"

services:
  db:
    image: mariadb:10.6
    restart: always
    command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
    volumes:
      - ./db:/var/lib/mysql:z
    environment:
      - MYSQL_ROOT_PASSWORD_FILE=/run/secrets/db_root_password
      - MYSQL_PASSWORD_FILE=/run/secrets/db_password
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
    secrets:
      - db_password
      - db_root_password

  app:
    image: nextcloud
    container_name: nextcloud
    restart: always
    environment:
      - NEXTCLOUD_TRUSTED_DOMAINS="nextcloud.pestctrl.io"
      - MYSQL_PASSWORD_FILE=/run/secrets/db_password
      - MYSQL_DATABASE=nextcloud
      - MYSQL_USER=nextcloud
      - MYSQL_HOST=db
    volumes:
      - ./nextcloud:/var/www/html:z
      - ./apps:/var/www/html/custom_apps:z
      - ./config:/var/www/html/config:z
      - ./data:/var/www/html/data:z
      - ./mysql:/var/lib/mysql:z
      - ./postgres:/var/lib/postgresql/data:z
    ports:
      - "5000:80"
    links:
      - db
    secrets:
      - db_password

secrets:
   db_password:
     file: ./db_password.secrets.txt
   db_root_password:
     file: ./db_root_password.secrets.txt