services:
  prx:
    image: 'jc21/nginx-proxy-manager:2.15.1'
    restart: unless-stopped
    environment:
      TZ: "Europe/Moscow"
    ports:
      - '80:80'
      - '443:443'
    volumes:
      - ./data/nginx-proxy-manager/data:/data
      - ./data/nginx-proxy-manager/letsencrypt:/etc/letsencrypt
    healthcheck:
      test: ["CMD", "/usr/bin/check-health"]
      interval: 60s
      timeout: 3s
  
  pwd:
    image: 'vaultwarden/server:latest'
    restart: unless-stopped
    volumes:
      - ./data/vaultwarden:/data
    secrets:
      - vaultwarden_admin_token
    environment:
      ADMIN_TOKEN_FILE: /run/secrets/vaultwarden_admin_token

  mon:
    image: 'henrygd/beszel'
    restart: unless-stopped
    volumes:
      - ./data/beszel/hub:/beszel_data
      - ./data/beszel/socket:/beszel_socket
    healthcheck:
      test: ['CMD', '/beszel', 'health', '--url', 'http://localhost:8090']
      start_period: 5s
      interval: 120s

  mon-agent:
    image: 'henrygd/beszel-agent'
    restart: unless-stopped
    network_mode: host
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./data/beszel/agent:/var/lib/beszel-agent
      - ./data/beszel/socket:/beszel_socket
    secrets:
      - beszel_agent_key
      - beszel_agent_token
    environment:
      LISTEN: /beszel_socket/beszel.sock
      KEY_FILE: /run/secrets/beszel_agent_key
      TOKEN_FILE: /run/secrets/beszel_agent_token
      HUB_URL: ${BESZEL_HUB_URL}
    healthcheck:
      test: ['CMD', '/agent', 'health']
      interval: 120s

  cld:
    image: 'nextcloud:30.0.6'
    restart: unless-stopped
    volumes:
      - ./data/nextcloud:/var/www/html
    environment:
      NEXTCLOUD_TRUSTED_DOMAINS: ${NEXTCLOUD_DOMAIN}
    healthcheck:
      test: ["CMD", "curl", "-fSs", "http://localhost"]
      interval: 60s
      timeout: 10s
      retries: 3

  git:
    image: 'docker.gitea.com/gitea:1.26.2'
    restart: unless-stopped
    volumes:
      - ./data/gitea/gitea:/data
    environment:
      GITEA__service__DISABLE_REGISTRATION: true
      GITEA__other__SHOW_FOOTER_VERSION: false
      GITEA__other__SHOW_FOOTER_POWERED_BY: false
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:3000/api/healthz"]
      interval: 10s
      timeout: 5s
      retries: 3

  git-runner:
    image: 'gitea/act_runner:latest'
    depends_on:
      git:
        condition: service_healthy
    environment:
      CONFIG_FILE: /config.yaml
      GITEA_INSTANCE_URL: "${GITEA_URL}"
      GITEA_RUNNER_REGISTRATION_TOKEN_FILE: /run/secrets/gitea_runner_registration_token
    volumes:
      - ./data/gitea/runner/config.yaml:/config.yaml
      - ./data/gitea/runner/data:/data
      - /var/run/docker.sock:/var/run/docker.sock
    secrets:
      - gitea_runner_registration_token

networks:
  default:
    name: vbevdev

secrets:
  vaultwarden_admin_token:
    file: secrets/vaultwarden_admin_token.txt
  beszel_agent_key:
    file: secrets/beszel_agent_key.txt
  beszel_agent_token:
    file: secrets/beszel_agent_token.txt
  # gitea_runner_registration_token:
  #   file: secrets/gitea_runner_registration_token.txt