version: '3.3'
services:
  openldap:
    build: services/ldap
    command: --loglevel info
    hostname: openldap
    environment:
      LDAP_ORGANISATION: "strongHome"
      LDAP_DOMAIN: "strongHome.vk496"
      LDAP_TLS_CRT_FILENAME: ldap.pem
      LDAP_TLS_KEY_FILENAME: ldap-key.pem
      LDAP_TLS_CA_CRT_FILENAME: ca.pem
      LDAP_TLS_ENFORCE: "true"
      LDAP_TLS_VERIFY_CLIENT: try
    volumes:
      - type: bind
        source: $PWD/config/strongHome-schema.yaml
        target: /strongHome/strongHome-schema.yaml
      - type: bind
        source: $PWD/config/strongHome-config.yaml
        target: /strongHome/strongHome-config.yaml
      - type: bind
        source: $PWD/openssl-ca/ldap-key.pem
        target: /container/service/slapd/assets/certs/ldap-key.pem
      - type: bind
        source: $PWD/openssl-ca/ldap.pem
        target: /container/service/slapd/assets/certs/ldap.pem
      - type: bind
        source: $PWD/openssl-ca/ca.pem
        target: /container/service/slapd/assets/certs/ca.pem
      - type: bind
        source: $PWD/openssl-ca/admin-ro-pw
        target: /cert/admin-ro-pw
    deploy:
      resources:
        limits:
          memory: 30M
        reservations:
          memory: 15M
    ports:
      - "636:636/tcp"
    networks:
      - ldap-net
      - radius-net
      - redis-net

  freeradius:
    build: services/radius
    # command: -X
    environment:
      STRONGHOME_SERVICE_NAME: "Radius"
    volumes:
      - type: bind
        source: $PWD/config/strongHome-schema.yaml
        target: /strongHome/strongHome-schema.yaml
      - type: bind
        source: $PWD/config/strongHome-config.yaml
        target: /strongHome/strongHome-config.yaml
      - type: bind
        source: $PWD/openssl-ca/dh
        target: /cert/dh
      - type: bind
        source: $PWD/openssl-ca/ca.pem
        target: /cert/ca.pem
      - type: bind
        source: $PWD/openssl-ca/radius.pem
        target: /cert/radius.pem
      - type: bind
        source: $PWD/openssl-ca/radius-key.pem
        target: /cert/radius-key.pem
      - type: bind
        source: $PWD/openssl-ca/radius-shared-secret
        target: /cert/radius-shared-secret
      - type: bind
        source: $PWD/openssl-ca/admin-ro-pw
        target: /cert/admin-ro-pw
    depends_on:
      - openldap
    deploy:
      resources:
        limits:
          memory: 50M
        reservations:
          memory: 20M
    ports:
      - "1812-1813:1812-1813/udp"
    networks:
      - radius-net
      - redis-net

  redis:
    image: redis:alpine
    hostname: redis
    networks:
      - redis-net


  simpleca:
    build: services/simpleca
    volumes:
      - type: bind
        source: $PWD/openssl-ca/ca.pem
        target: /usr/share/nginx/html/ca.pem
      - type: bind
        source: $PWD/openssl-ca/radius.pem
        target: /cert/radius.pem
      - type: bind
        source: $PWD/openssl-ca/radius-key.pem
        target: /cert/radius-key.pem
    deploy:
      resources:
        limits:
          memory: 10M
    ports:
      - "80:80"
    networks:
      - redis-net


  nextcloud:
    build: services/nextcloud
    environment:
      REDIS_HOST: redis
      NEXTCLOUD_ADMIN_USER: admin
      NEXTCLOUD_ADMIN_PASSWORD: admin # Will be changed automatically
      SQLITE_DATABASE: test
      STRONGHOME_SERVICE_NAME: "NextCloud"
    volumes:
      - type: bind
        source: $PWD/openssl-ca/ca.pem
        target: /cert/ca.pem
      - type: bind
        source: $PWD/openssl-ca/admin-ro-pw
        target: /cert/admin-ro-pw
      - type: bind
        source: $PWD/config/strongHome-config.yaml
        target: /strongHome/strongHome-config.yaml
    ports:
      - "8080:80"
    networks:
      - ldap-net
      - redis-net



  # asterisk:
  #   build: services/voip
  #   ports:
  #    - "5060:5060/udp"
  #    - "5060:5060/tcp"
  #    - "10000-10099:10000-10099/udp"
  #    - "8088:8088"
  #    - "8089:8089"

  # webldap:
  #   image: osixia/phpldapadmin:0.8.0
  #   environment:
  #     PHPLDAPADMIN_LDAP_HOSTS: openldap
  #   ports:
  #     - "443:443"
  #     - "80:80"
  #   networks:
  #     - ldap-net

networks:
  ldap-net:
  radius-net:
  redis-net: