version: "3"
services:
  nginx:
    build:
      context: .
      dockerfile: nginx/Dockerfile
      args:
        - SELFSIGNED_REQ_HOST=${SA_PUBLIC_DOMAIN_NAME}
        - SELFSIGNED_REQ_ALT_NAMES=DNS:${SA_PUBLIC_DOMAIN_NAME},
            DNS:id.${SA_PUBLIC_DOMAIN_NAME}, DNS:mail.${SA_PUBLIC_DOMAIN_NAME},
            DNS:review.${SA_PUBLIC_DOMAIN_NAME}
    env_file: environment
    ports:
      - "80:80"
      - "443:443"
    networks:
      - simpleidnet
      - gerritnet
    volumes:
      - ./certbot/www/:/var/www/certbot/:ro
      - ./simpleid/identities/:/var/db/simpleid-templates/:ro
      - ./simpleid/www/:/var/www/simpleid/:ro
      - ./certs/:/etc/nginx/certs/:rw
      - ./nginx/sa.conf:/etc/nginx/conf.d/sa.conf.template:ro
      - ./nginx/empty.conf:/etc/nginx/conf.d/default.conf:ro
      - ./logs/nginx:/var/log/nginx/:rw
  simpleid:
    build:
      context: .
      dockerfile: simpleid/Dockerfile
    env_file: environment
    networks:
      - simpleidnet
    volumes:
      - ./simpleid/cache/:/var/cache/simpleid/:rw
      - ./simpleid/identities/:/var/db/simpleid-templates/:ro
      - ./simpleid/store/:/var/lib/simpleid/:rw
      - ./simpleid/www/:/var/www/simpleid/:ro
      - ./logs/simpleid/:/var/log/:rw
  gerrit:
    build:
      context: .
      dockerfile: gerrit/Dockerfile
    env_file: gerrit/environment
    environment:
      - HTTPD_LISTEN_URL=proxy-https://*:8080/
    networks:
      - gerritnet
    volumes:
      - ./logs/gerrit/:/var/gerrit/logs/:rw
      - ./gerrit/etc/:/var/gerrit/etc/:rw
      - ./gerrit/db/:/var/gerrit/db/:rw
      - ./gerrit/git/:/var/gerrit/git/:rw
      - ./gerrit/index/:/var/gerrit/index/:rw
      - ./gerrit/cache/:/var/gerrit/cache/:rw
      - ./gerrit/gerrit-oauth-provider.jar:/var/gerrit/plugins/gerrit-oauth-provider.jar:ro
networks:
  simpleidnet:
    driver: bridge
    ipam:
      config:
        - subnet: 10.12.14.16/29
  gerritnet:
    driver: bridge
    ipam:
      config:
        - subnet: 10.12.14.24/29