version: "3.7"

x-defaults: &default
  restart: unless-stopped

services:
  ide:
    <<: *default
    #image: linuxserver/code-server
    build: ide
    container_name: ide
    networks:
      - connector
    volumes:
      - ide_config:/config
    environment:
      PASSWORD: password
      SUDO_PASSWORD: pass
    labels:
      - "traefik.http.routers.codeServerSecure.rule=Host(`code.sherman.one`)"
      - "traefik.http.routers.codeServerSecure.tls=true"
      - "traefik.http.routers.codeServerSecure.tls.certresolver=le"
      - "traefik.http.routers.codeServerSecure.tls.domains[0].sans=*.sherman.one"
      - "traefik.http.routers.codeServerSecure.entrypoints=web-secure"
      - "traefik.http.routers.codeServer.rule=Host(`code.sherman.one`)"
      - "traefik.http.routers.codeServer.entrypoints=web"
      - "traefik.http.routers.codeServer.middlewares=file-https@file"
      - "traefik.http.services.codeServer.loadbalancer.server.port=8443"

  bitwarden:
    image: bitwardenrs/server
    container_name: bitwarden
    restart: unless-stopped
    networks:
      - connector
    volumes:
      - bitwarden_data:/data
    ports:
      - "1335:80"
    dns:
      - 192.168.1.1
    labels:
      - "traefik.http.routers.bitwarden.rule=Host(`pw.sherman.one`)"
      - "traefik.http.routers.bitwarden.tls=true"
      - "traefik.http.routers.bitwarden.tls.certresolver=le"
      - "traefik.http.routers.bitwarden.tls.domains[0].sans=*.sherman.one"
      - "traefik.http.routers.bitwarden.entrypoints=web-secure"
      - "traefik.http.routers.bitwardenredirect.rule=Host(`pw.sherman.one`)"
      - "traefik.http.routers.bitwardenredirect.entrypoints=web"
      - "traefik.http.routers.bitwardenredirect.middlewares=file-https@file"

  hass:
    image: homeassistant/home-assistant:stable
    container_name: hass
    restart: unless-stopped
    network_mode: host
    volumes:
      - homeassistant_config:/config
    dns:
      - 192.168.1.1
    environment:
      TZ: America/New_York
  
  grocy:
    image: linuxserver/grocy
    container_name: grocy
    restart: unless-stopped
    networks:
      - connector
    environment:
      TZ: America/New_York
    volumes:
      - grocy_config:/config
    dns:
      - 192.168.1.1
    labels:
      - "traefik.http.routers.grocySecure.rule=Host(`grocy.sherman.one`)"
      - "traefik.http.routers.grocySecure.tls=true"
      - "traefik.http.routers.grocySecure.tls.certresolver=le"
      - "traefik.http.services.grocy.loadbalancer.server.port=80"

  barcode-buddy:
    image: f0rc3/barcodebuddy-docker
    container_name: barcode-buddy
    restart: unless-stopped
    networks:
      - connector
    volumes:
      - barcode_buddy_config:/config
    dns:
      - 192.168.1.1
    labels:
      - "traefik.http.routers.bb.rule=Host(`bb.sherman.one`)"
      - "traefik.http.services.bb.loadbalancer.server.port=80"

  git:
    image: gitea/gitea:latest
    container_name: gitea
    environment:
      USER_UID: 1000
      USER_GID: 1000
      DISABLE_SSH: "true"
      ROOT_URL: "https://git.sherman.one"
    restart: unless-stopped
    networks:
      - connector
    volumes:
      - gitea:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    labels:
      - "traefik.http.routers.gitearedirect.rule=Host(`git.sherman.one`)"
      - "traefik.http.routers.gitearedirect.middlewares=file-https@file"
      - "traefik.http.routers.gitearedirect.entrypoints=web"
      - "traefik.http.routers.gitea.rule=Host(`git.sherman.one`)"
      - "traefik.http.routers.gitea.tls=true"
      - "traefik.http.routers.gitea.tls.certresolver=le"
      - "traefik.http.routers.gitea.entrypoints=web-secure"
      - "traefik.http.routers.gitea.tls.domains[0].sans=*.sherman.one"
      - "traefik.http.services.gitea.loadbalancer.server.port=3000"

  teedy:
    image: sismics/docs:v1.7
    container_name: teedy
    restart: unless-stopped
    networks:
      - connector
    volumes:
      - teedy:/data
    labels:
      - "traefik.http.routers.teedy.rule=Host(`docs.sherman.one`)"

  files:
    build: files
    container_name: fileserver
    restart: unless-stopped
    networks:
      - connector
    volumes:
      - files:/var/www/localhost/htdocs/files/
    labels:
      - "traefik.http.routers.files.rule=Host(`sherman.one`)&&PathPrefix(`/files/`)"
      - "traefik.http.routers.files.tls=true"
      - "traefik.http.routers.files.tls.certresolver=le"
      - "traefik.http.routers.files.entrypoints=web-secure"
      - "traefik.http.routers.filesRedirect.rule=Host(`sherman.one`)&&PathPrefix(`/files/`)"
      - "traefik.http.routers.filesRedirect.middlewares=file-https@file"
      - "traefik.http.routers.filesRedirect.entrypoints=web"
      
  minecraft:
    image: itzg/minecraft-server
    container_name: minecraft
    restart: unless-stopped
    volumes:
      - minecraft:/data
    dns:
      - 192.168.1.1
    ports:
      - "25565:25565"
      - "25575:25575"
    environment:
      EULA: "TRUE"
      TYPE: "FORGE"
      MEMORY: "10G"
      VERSION: "1.12.2"
      ENABLE_RCON: "TRUE"
      RCON_PASSWORD: "password"
      RCON_PORT: "25575"
      MAX_TICK_TIME: -1
      ALLOW_FLIGHT: "TRUE"
        


volumes:
  ide_config:
    driver_opts:
      type: btrfs
      o: rw,noatime,compress=zstd,subvol=@config/ide
      device: /dev/sdc
  nextcloud_data:
    driver_opts:
      type: btrfs
      o: rw,noatime,compress=zstd,subvol=@data/nextcloud
      device: /dev/sdc
  nextcloud_config:
    driver_opts:
      type: btrfs
      o: rw,noatime,compress=zstd,subvol=@config/nextcloud
      device: /dev/sdc
  bitwarden_data:
    driver_opts:
      type: btrfs
      o: rw,noatime,compress=zstd,subvol=@data/bitwarden
      device: /dev/sdc
  homeassistant_config:
    driver_opts:
      type: btrfs
      o: rw,noatime,compress=zstd,subvol=@config/homeassistant
      device: /dev/sdc
  grocy_config:
    driver_opts:
      type: btrfs
      o: rw,noatime,compress=zstd,subvol=@config/grocy
      device: /dev/sdc
  gitea:
    driver_opts:
      type: btrfs
      o: rw,noatime,compress=zstd,subvol=@data/gitea
      device: /dev/sdc
  teedy:
    driver_opts:
      type: btrfs
      o: rw,noatime,compress=zstd,subvol=@data/teedy
      device: /dev/sdc
  minecraft:
    driver_opts:
      type: btrfs
      o: rw,noatime,compress=zstd,subvol=@data/minecraft
      device: /dev/sdc
  barcode_buddy_config:
    driver_opts:
      type: btrfs
      o: rw,noatime,compress=zstd,subvol=@config/barcode_buddy
      device: /dev/sdc
  files:
    driver_opts:
      type: btrfs
      o: rw,noatime,compress=zstd,subvol=@data/files
      device: /dev/sdc

networks:
  connector:
    external: true