version: "3.9"

services:
  firefly-db:
    image: mariadb:10.11
    container_name: firefly-db
    restart: unless-stopped
    env_file:
      - .db.env
    volumes:
      - /mnt/user/appdata/firefly/db:/var/lib/mysql
    networks:
      - backend_net
    security_opt:
      - no-new-privileges:true

  firefly-app:
    image: fireflyiii/core:latest
    container_name: firefly-app
    restart: unless-stopped
    depends_on:
      - firefly-db
    env_file:
      - .env
    volumes:
      - /mnt/user/appdata/firefly/upload:/var/www/html/storage/upload
    networks:
      - frontend_net
      - backend_net
    security_opt:
      - no-new-privileges:true
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend_net"
      - "traefik.http.routers.firefly.rule=Host(`firefly.kaleschke.info`)"
      - "traefik.http.routers.firefly.entrypoints=websecure"
      - "traefik.http.routers.firefly.tls=true"
      - "traefik.http.routers.firefly.tls.certresolver=le"
      - "traefik.http.services.firefly.loadbalancer.server.port=8080"

  firefly-importer:
    image: fireflyiii/data-importer:latest
    container_name: firefly-importer
    restart: unless-stopped
    depends_on:
      - firefly-app
    env_file:
      - .env
    networks:
      - frontend_net
    security_opt:
      - no-new-privileges:true
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=frontend_net"
      - "traefik.http.routers.firefly-importer.rule=Host(`import.firefly.kaleschke.info`)"
      - "traefik.http.routers.firefly-importer.entrypoints=websecure"
      - "traefik.http.routers.firefly-importer.tls=true"
      - "traefik.http.routers.firefly-importer.tls.certresolver=le"
      - "traefik.http.services.firefly-importer.loadbalancer.server.port=8080"

networks:
  frontend_net:
    external: true
  backend_net:
    external: true