name: tdwiki

services:
  tiddlywiki:
    build:
      context: .
      dockerfile: docker/tiddlywiki/Dockerfile
    restart: unless-stopped
    init: true
    user: "${PUID:-1000}:${PGID:-1000}"
    command:
      - .
      - --listen
      - host=0.0.0.0
      - port=8080
      - gzip=yes
      - use-browser-cache=yes
    volumes:
      - ./tiddlers:/wiki/tiddlers
      - ./files:/wiki/files:ro
      - ./tiddlywiki.info:/wiki/tiddlywiki.info:ro
    expose:
      - "8080"
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:8080/"]
      interval: 10s
      timeout: 3s
      retries: 12
      start_period: 10s
    security_opt:
      - no-new-privileges:true

  redis:
    image: redis:7.4-alpine
    restart: unless-stopped
    command: ["redis-server", "--save", "60", "1", "--loglevel", "warning"]
    volumes:
      - redis-data:/data
    healthcheck:
      test: ["CMD", "redis-cli", "ping"]
      interval: 10s
      timeout: 3s
      retries: 5
    security_opt:
      - no-new-privileges:true

  authelia:
    image: authelia/authelia:4.39.20
    restart: unless-stopped
    depends_on:
      redis:
        condition: service_healthy
    volumes:
      - ./docker/authelia:/config:ro
      - ./data/authelia:/var/lib/authelia
      - ./secrets:/secrets:ro
    environment:
      TZ: "${TZ:-Asia/Shanghai}"
      AUTHELIA_IDENTITY_VALIDATION_RESET_PASSWORD_JWT_SECRET_FILE: /secrets/authelia_jwt_secret
      AUTHELIA_SESSION_SECRET_FILE: /secrets/authelia_session_secret
      AUTHELIA_STORAGE_ENCRYPTION_KEY_FILE: /secrets/authelia_storage_encryption_key
    expose:
      - "9091"
    healthcheck:
      test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:9091/api/health"]
      interval: 10s
      timeout: 3s
      retries: 12
      start_period: 10s
    security_opt:
      - no-new-privileges:true

  caddy:
    build:
      context: .
      dockerfile: docker/caddy/Dockerfile
      args:
        GOPROXY: "${GOPROXY:-https://goproxy.cn,direct}"
    restart: unless-stopped
    depends_on:
      tiddlywiki:
        condition: service_healthy
      authelia:
        condition: service_healthy
    environment:
      BASE_DOMAIN: "${BASE_DOMAIN:-tdwiki.home.arpa}"
    ports:
      - "8081:80"
      - "443:443"
      - "443:443/udp"
    volumes:
      - ./docker/caddy/Caddyfile:/etc/caddy/Caddyfile:ro
      - ./files:/srv/files
      - ./data/caddy/data:/data
      - ./data/caddy/config:/config
    security_opt:
      - no-new-privileges:true

volumes:
  redis-data: