---
version: "3.6"

services:
  database:
    image: docker.io/library/mariadb:11
    restart: always
    command: --transaction-isolation=READ-COMMITTED --log-bin=binlog --binlog-format=ROW
    volumes:
      - database:/var/lib/mysql
    environment:
      - "MYSQL_ROOT_PASSWORD={{ lookup("community.general.passwordstore", "noc/vm-secrets/chaosknoten/pad/DB_PASSWORD", create=false, missing="error") }}"
      - "MYSQL_PASSWORD={{ lookup("community.general.passwordstore", "noc/vm-secrets/chaosknoten/pad/DB_PASSWORD", create=false, missing="error") }}"
      - "MYSQL_DATABASE=nextcloud"
      - "MYSQL_USER=nextcloud"
  
  app:
    image: docker.io/library/nextcloud:25-fpm
    restart: always
    ports:
      - 8080:8080
    links:
      - db
    volumes:
      - nextcloud:/var/www/html
    environment:
      - "MYSQL_PASSWORD={{ lookup("community.general.passwordstore", "noc/vm-secrets/chaosknoten/cloud/DB_PASSWORD", create=false, missing="error") }}"
      - "MYSQL_DATABASE=nextcloud"
      - "MYSQL_USER=nextcloud"
      - "MYSQL_HOST=db"

volumes:
  # FIXME: tell Docker to put volumes in /data instead of /var/lib/docker/
  database: {}
  nextcloud: {}

networks:
  backend:
    internal: true
  frontend: {}