version: '3.5'
services:

  sqldb:
    image: mysql:5.7
    environment:
      - MYSQL_DATABASE=kimai
      - MYSQL_USER=kimaiuser
      - MYSQL_PASSWORD=kimaipassword
      - MYSQL_ROOT_PASSWORD=changemeplease
    volumes:
      - ./data:/var/lib/mysql
    command: --default-storage-engine innodb
    restart: unless-stopped
    healthcheck:
      test: mysqladmin -pchangemeplease ping -h localhost
      interval: 20s
#      start_period: 10s
#      timeout: 10s
#      retries: 3

  nginx:
    build: compose
#    ports:
#      - 8001:80
    environment:
      - VIRTUAL_HOST=time.franv.site
      - LETSENCRYPT_HOST=time.franv.site
      - LETSENCRYPT_EMAIL=ouch@thetrauma.org
      - VIRTUAL_PORT=8001
      - TRUSTED_PROXY=nginx-proxy


    volumes:
      - ./compose/nginx_site.conf:/etc/nginx/conf.d/default.conf:ro
      - public:/opt/kimai/public:ro
    restart: unless-stopped
    depends_on:
      - kimai
#    healthcheck:
#      test:  wget --spider http://nginx/health || exit 1
#      interval: 20s
#      start_period: 10s
#      timeout: 10s
#      retries: 3

  kimai:
    image: kimai/kimai2:fpm-alpine-1.5-prod
    environment:
      - APP_ENV=prod
      - TRUSTED_HOSTS=time.franv.site
#      - TRUSTED_HOSTS=167.86.125.173
#      - TRUSTED_PROXY=nginx-proxy
#      - VIRTUAL_HOST=time.franv.site
#      - LETSENCRYPT_HOST=time.franv.site
#      - LETSENCRYPT_EMAIL=ouch@thetrauma.org
#      - VIRTUAL_PORT=8001
 

      - ADMINMAIL=admin@kimai.local
      - ADMINPASS=changemeplease
    volumes:
      - public:/opt/kimai/public
      - var:/opt/kimai/var
      # - ./ldap.conf:/etc/openldap/ldap.conf:z
      # - ./ROOT-CA.pem:/etc/ssl/certs/ROOT-CA.pem:z
    restart: unless-stopped
    healthcheck:
      test: wget --spider http://nginx || exit 1
      interval: 20s
#      start_period: 10s
#      timeout: 10s
#      retries: 3

#  postfix:
#    image: catatnight/postfix:latest
#    environment:
#      maildomain: neontribe.co.uk
#      smtp_user: kimai:kimai
#    restart: unless-stopped
#    restart: always

volumes:
    var:
    public:

networks:
  default:
    external:
      name: franvproxy_proxy-tier