version: '3'

services:
  authelia:
    container_name: authelia
    image: authelia/authelia
    environment:
      - TZ=${TZ}
    ports:
      - 9091:9091
    restart: always
    volumes:
      - ${DOCKERCONFIGS}/authelia/config:/config

  crowdsec:
    container_name: crowdsec
    image: crowdsecurity/crowdsec
    environment:
      - COLLECTIONS=crowdsecurity/sshd crowdsecurity/nginx crowdsecurity/nginx-proxy-manager
      - BOUNCER_KEY_OPENWRT=e5eafa00ff6db5164b12426c6cfb6b62
    ports:
      - 8280:8080
      - 6260:6060
    restart: always
    volumes:
      - ${DOCKERCONFIGS}/crowdsec/config:/etc/crowdsec
      - ${DOCKERCONFIGS}/crowdsec/config/acquis.d:/etc/crowdsec/acquis.d
      - ${DOCKERCONFIGS}/crowdsec/config/acquis.yaml:/etc/crowdsec/acquis.yaml
      - ${DOCKERCONFIGS}/crowdsec/data:/var/lib/crowdsec/data
      - ${DOCKERCONFIGS}/nginxproxymanager/data/logs:/logs/nginx:ro
      - /var/log/auth.log:/logs/auth.log:ro
      - /var/log/syslog:/logs/syslog:ro

  ddclient:
    container_name: ddclient
    image: lscr.io/linuxserver/ddclient:latest
    environment:
      - PUID=${PUID}
      - PGID=${PGID}
      - TZ=${TZ}
    restart: always
    volumes:
      - ${DOCKERCONFIGS}/ddclient/config:/config

  nginxproxymanager:
    container_name: nginxproxymanager
    image: jc21/nginx-proxy-manager:2.10.4
    environment:
      - X_FRAME_OPTIONS=sameorigin
      - DB_SQLITE_FILE=/data/database.sqlite
    ports:
      - 443:443/tcp
      - 80:80/tcp
      - 81:81/tcp
    restart: always
    volumes:
      - ${DOCKERCONFIGS}/nginxproxymanager/data:/data
      - ${DOCKERCONFIGS}/nginxproxymanager/letsencrypt:/etc/letsencrypt
      - ${DOCKERCONFIGS}/nginxproxymanager/snippets:/snippets:ro
      - /etc/localtime:/etc/localtime:ro

networks:
  proxy: