docker-compose.yaml

version: "3.7"

services:

  # hk, httpd, php, redis, sshd all use the same image that is build in service hk target
  
  hk:
    image: alpine:${ALPINE_VERSION}-extended
    hostname: hk
    container_name: ${VHOST}_hk
    domainname: buildhub.local
    build:
      context: ./service
      dockerfile: hk/Dockerfile
      args:
        ALPINE_VERSION: ${ALPINE_VERSION}
        PHP_VERSION: ${PHP_VERSION}
    volumes:
      - ./service/hk/bin:/usr/local/sbin:ro
      - ./service/hk/conf:/usr/local/conf:ro
      - ${CALL_BACK_DIR}:/run/host-callback
      - ${WWW_IPB_ROOT}:/var/www/ipb
      - var_log:/var/log
      - backups:/backups
    restart: on-failure
    environment:
      VHOST: ${VHOST}

  httpd:
    image: alpine:${ALPINE_VERSION}-extended
    hostname: httpd
    container_name: ${VHOST}_httpd
    depends_on:
      - hk
      - php
      - mysql
    restart: on-failure
    volumes:
      - ./service/httpd/bin:/usr/local/sbin:ro
      - ./service/httpd/conf:/usr/local/conf:ro
      - ${SSH_CERT_DIR}:/etc/letsencrypt
      - ${WWW_IPB_ROOT}:/var/www/ipb
      - var_log:/var/log
    ports:
      - "${HTTP_PORT}:80"
      - "${HTTPS_PORT}:443"
    environment:
      VHOST: ${VHOST}
      DOMAIN: ${DOMAIN}
      HTTPS_PORT: ${HTTPS_PORT}
      APACHE_LOG_DIR: /var/log/apache2

  php:
    image: alpine:${ALPINE_VERSION}-extended
    hostname: php
    container_name: ${VHOST}_php
    depends_on:
      - hk
      - mysql
      - redis
    restart: on-failure
    volumes:
      - ./service/php/bin:/usr/local/sbin:ro
      - ./service/php/conf:/usr/local/conf:ro
      - ${WWW_IPB_ROOT}:/var/www/ipb
      - var_log:/var/log
    environment:
      VHOST: ${VHOST}
      PHP_VERSION: ${PHP_VERSION}

  redis:
    image: alpine:${ALPINE_VERSION}-extended
    hostname: redis
    container_name: ${VHOST}_redis
    depends_on:
      - hk
    restart: on-failure
    volumes:
      - ./service/redis/bin:/usr/local/sbin:ro
      - redis_data:/var/lib/redis
      - var_log:/var/log
    secrets:
      - redis-pwd

  mysql:
    image: mysql:${MYSQL_VERSION}-extended
    hostname: mysql
    container_name: ${VHOST}_mysql
    build:
      context: ./service
      dockerfile: mysql/Dockerfile
      args:
        MYSQL_VERSION: ${MYSQL_VERSION}
    restart: on-failure
    volumes:
      - ./service/mysql/bin:/usr/local/sbin:ro
      - ./service/mysql/conf:/usr/local/etc:ro
      - mysql_data:/var/lib/mysql
      - var_log:/var/log
      - backups:/backups
    environment:
      MYSQL_ROOT_PASSWORD_FILE: /run/secrets/mysql-root
      MYSQL_DATABASE: ${MYSQL_DATABASE}
      TZ: ${TZ}
      VHOST: ${VHOST}
    secrets:
      - mysql-root
    security_opt:
      - seccomp:unconfined

  sshd:
    image: alpine:${ALPINE_VERSION}-extended
    hostname: sshd
    container_name: ${VHOST}_sshd
    depends_on:
      - hk
    restart: on-failure
    volumes:
      - ./service/sshd/bin:/usr/local/sbin:ro
      - /etc/ssh:/usr/local/conf:ro
      - var_log:/var/log
      - backups:/backups
    ports:
      - "${SSH_PORT}:22"
    environment:
      VHOST: ${VHOST}
    secrets:
      - authorized_keys

secrets:
  authorized_keys:
    file: .secrets/authorized_keys
  mysql-root:
    file: .secrets/mysql-root
  redis-pwd:
    file: .secrets/redis-pwd

volumes:
  mysql_data:
    external:
      name: ${DBHOST}_mysql_data
  var_log:
    external:
      name: ${VHOST}_var_log
  backups:
    external:
      name: ${VHOST}_backups
  redis_data:
    external:
      name: ${VHOST}_redis_data