# Opt-in: let a Nextcloud on ANOTHER machine use this server as its storage gateway (Nextcloud
# app "Android Storage Nodes", integrations/nextcloud/). Adds the S3 interface over TLS on its
# own port, signed by the same private CA as the website (the app pins it by fingerprint).
# Not needed when Nextcloud runs in this compose project (it reaches s3gw:9000 internally).
#
#   COMPOSE_FILE=compose.yaml:compose.nextcloud.yaml:compose.gateway.yaml
#   S3_DOMAIN=<LAN IP or name>   S3_HTTPS_PORT=9445 (default)
#
# The port is bound to HUB_BIND like the others (LAN only by default); every request needs a
# SigV4 signature from an integration client's key (`mediahub integration create`).
services:
  s3gw:
    extends:
      file: compose.nextcloud.yaml
      service: s3gw

  caddy:
    environment:
      S3_SITES: ${S3_SITES:-https://${S3_DOMAIN:-localhost}:${S3_HTTPS_PORT:-9445}}
    ports:
      - "${HUB_BIND:-127.0.0.1}:${S3_HTTPS_PORT:-9445}:${S3_HTTPS_PORT:-9445}"
    volumes:
      - ./deploy/caddy/s3.caddy:/etc/caddy/sites/s3.caddy:ro