docker-compose.yml

---
services:
  code:
    cap_add:
      - MKNOD
    image: registry.hub.docker.com/collabora/code:25.04.2.1.1
    environment:
      aliasgroup1: https://nextcloud.shore.co.il:443
      dictionaries: en_GB en_US he_IL
      extra_params: >-
        --o:ssl.enable=false
        --o:ssl.termination=true
        --o:mount_jail_tree=false
        --o:net.post_allow.host[7]=172\.1[6789]\.[0-9]{1,3}\.[0-9]{1,3}
        --o:net.post_allow.host[8]=172\.2[0-9]\.[0-9]{1,3}\.[0-9]{1,3}
        --o:net.post_allow.host[9]=172\.3[01]\.[0-9]{1,3}\.[0-9]{1,3}
        --o:net.frame_ancestors=https://nextcloud.shore.co.il
      # yamllint disable-line rule:line-length
      password: &admin_password "${NEXTCLOUD_ADMIN_PASSWORD:-baz}"  # pragma: allowlist secret
      server_name: code.shore.co.il
      username: &admin_username admin
      # DONT_GEN_SSL_CERT: foo
    healthcheck:
      test:
        - CMD-SHELL
        - >-
          curl
          --fail
          http://localhost:9980/
          || exit 1
    restart: always
    tty: true

  crond:
    build:
      context: crond/
    restart: always
    volumes:
      - /run/docker.sock:/run/docker.sock
      - /var/backups/nextcloud:/var/backups

  mysql:
    command: >-
      --transaction-isolation=READ-COMMITTED
      --binlog-format=ROW
      --innodb-read-only-compressed=OFF
    environment:
      MARIADB_AUTO_UPGRADE: "1"
      MYSQL_DATABASE: &mysql_database nextcloud
      # yamllint disable-line rule:line-length
      MYSQL_PASSWORD: &mysql_password ${MYSQL_PASSWORD:-foo}  # pragma: allowlist secret
      # yamllint disable-line rule:line-length
      MYSQL_ROOT_PASSWORD: &mysql_root_password ${MYSQL_ROOT_PASSWORD:-bar}  # pragma: allowlist secret
      MYSQL_USER: &mysql_user nextcloud
    healthcheck:
      start_period: 1m
      test:
        - CMD-SHELL
        - >-
          mariadb
          --user "$$MYSQL_USER"
          "--password=$$MYSQL_PASSWORD"
          --execute 'SHOW DATABASES;'
          || exit 1
    image: registry.hub.docker.com/library/mariadb:11
    restart: always
    volumes:
      - mysql:/var/lib/mysql

  nextcloud: