---
version: "3.6"

services:
  database:
    image: docker.io/library/mariadb:11
    restart: always
    command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
    volumes:
      - /data/docker/volumes/database:/var/lib/mysql
    environment:
      - "MYSQL_ROOT_PASSWORD={{ lookup("community.general.passwordstore", "noc/vm-secrets/chaosknoten/cloud/DB_PASSWORD", create=false, missing="error") }}"
      - "MYSQL_PASSWORD={{ lookup("community.general.passwordstore", "noc/vm-secrets/chaosknoten/cloud/DB_PASSWORD", create=false, missing="error") }}"
      - "MYSQL_DATABASE=nextcloud"
      - "MYSQL_USER=nextcloud"
    networks:
      backend: {}
  
  app:
    image: docker.io/library/nextcloud:25-fpm
    restart: always
    ports:
      - 9000:9000
    links:
      - database
    volumes:
      - /data/docker/volumes/nextcloud:/var/www/html
    environment:
      - "MYSQL_PASSWORD={{ lookup("community.general.passwordstore", "noc/vm-secrets/chaosknoten/cloud/DB_PASSWORD", create=false, missing="error") }}"
      - "MYSQL_DATABASE=nextcloud"
      - "MYSQL_USER=nextcloud"
      - "MYSQL_HOST=database"
    networks:
      backend: {}
      frontend: {}

volumes: {}
  # FIXME: tell Docker to put volumes in /data instead of /var/lib/docker/
  #database: {}
  #nextcloud: {}

networks:
  backend:
    internal: true
  frontend: {}