services:
  db:
    image: mariadb:11.4-noble #LTS Long Time Support Until May 29, 2029.
    container_name: seafile-db
    hostname: seafile-db
    security_opt:
      - no-new-privileges:false
    volumes:
      - mysql:/var/lib/mysql:rw
    environment:
      MYSQL_ROOT_PASSWORD: rootpass
      MYSQL_DATABASE: seafile_db
      MYSQL_USER: seafileuser
      MYSQL_PASSWORD: seafilepassword
      TZ: Europe/Berlin
    restart: on-failure:5

  cache:
    image: memcached:1.6
    entrypoint: memcached -m 256
    container_name: seafile-cache
    hostname: memcached
    security_opt:
      - no-new-privileges:true
    read_only: true
    #user: 1000:100
    restart: on-failure:5
    
  redis:
    image: redis
    container_name: seafile-redis
    command:
      - /bin/sh
      - -c
      - redis-server --requirepass redispass
    hostname: redis
    security_opt:
      - no-new-privileges:true
    read_only: false
    #user: 1000:100
    healthcheck:
      test: ["CMD-SHELL", "redis-cli ping || exit 1"]
    volumes:
      - redis:/data:rw
    environment:
      TZ: Europe/Berlin
    restart: on-failure:5
    
  seafile:
    image: seafileltd/seafile-mc:13.0.9

    container_name: seafile
    user: 0:0
    hostname: seafile
    security_opt:
      - no-new-privileges:false
    healthcheck:
      test: wget --no-verbose --tries=1 --spider http://localhost
    volumes:
      - data:/shared:rw
    ports:
      - 8611:80
    environment:
       INIT_SEAFILE_MYSQL_ROOT_PASSWORD: rootpass
       SEAFILE_MYSQL_DB_HOST: seafile-db
       SEAFILE_MYSQL_DB_USER: seafileuser
       SEAFILE_MYSQL_DB_PORT: 3306
       SEAFILE_MYSQL_DB_PASSWORD: seafilepassword
       SEAFILE_MYSQL_DB_SEAFILE_DB_NAME: seafile_db
       SEAFILE_MYSQL_DB_CCNET_DB_NAME: ccnet_db
       SEAFILE_MYSQL_DB_SEAHUB_DB_NAME: seahub_db
       CACHE_PROVIDER: redis
       REDIS_HOST: redis
       REDIS_PORT: 6379
       REDIS_PASSWORD: redispass
       TIME_ZONE: Europe/Berlin
       SEAFILE_VOLUME: /opt/seafile-data
       SEAFILE_MYSQL_VOLUME: /opt/seafile-mysql/db
       INIT_SEAFILE_ADMIN_EMAIL: michael.scheidel@scheidel.biz
       INIT_SEAFILE_ADMIN_PASSWORD: ?Aichwald01
       JWT_PRIVATE_KEY: dOxZYTTZgXKMHkqLBIQVImayQXAVWdzGBPuFJKggzcgvgPJPXpWzqzKaUOIOGGIr
       SEADOC_VOLUME: /opt/seadoc-data
       SEADOC_IMAGE: seafileltd/sdoc-server:2.0-latest
       ENABLE_SEADOC: false #or true
       SEADOC_SERVER_URL: https://seafile.scheidel.biz/sdoc-server
       SEAFILE_SERVER_HOSTNAME: seafile.scheidel.biz
       SEAFILE_SERVER_PROTOCOL: https
       FORCE_HTTPS_IN_CONF: true
       SEAFILE_SERVER_LETSENCRYPT: false
    depends_on:
      db:
        condition: service_started
      cache:
        condition: service_started
      redis:
        condition: service_started
    restart: on-failure:5

volumes:
  mysql:
  redis:
  data: