version: '3'
services:
  smtp:
    container_name: smtp
    build: ./smtp
    restart: always
    depends_on: 
      - imap
      - db
    ports:
      - '25:25'
      - '587:587'
    links:
      - imap:imap
      - db:db
      - spam:spam
    volumes:
      - ./smtp/main.cf:/etc/postfix/main.cf:ro
      - ./smtp/master.cf:/etc/postfix/master.cf:ro
      - /data/mailserver/mailman/data:/mailman
      - mails:/home/vmail
      - certs:/certs
    environment:
      - DATABASE_USER=mail
      - DATABASE_PASSWORD=db_password
      - DATABASE_NAME=postfix
      - MYORIGIN=creditcards.bayern
      - MYHOSTNAME=mail.creditcards.bayern
    labels:
      - "traefik.enable=false"

  imap:
    container_name: imap
    build: ./imap
    restart: always
    depends_on:
     - extractor
     - db
    ports:
     - '993:993'
     - '4190:4190'
    expose:
     - '24'
     - '8472'
    links:
      - db
      - spam
    volumes:
      - mails:/home/vmail
      - certs:/certs
    environment:
      - "DATABASE_USER=mail"
      - "DATABASE_PASSWORD=db_password"
      - "DATABASE_NAME=postfix"
      - "MAILDOMAIN=mail.creditcards.bayern"
    labels:
      - "traefik.enable=false"

  spam:
    container_name: spam
    build: ./spam
    restart: always
    expose:
      - 11334
    volumes:
      - spam:/data
      - /etc/localtime:/etc/localtime:ro
    environment:
      - PASSWORD=nichtsicher
      - PORT=11334
    labels:
      - "traefik.frontend.rule=Host:spam.creditcards.bayern"
      - "traefik.port=11334"

  webmail:
    container_name: webmail
    image: roundcube/roundcubemail:latest-apache
    depends_on:
      - smtp
      - imap
      - db
    restart: always
    links:
      - imap:imap
      - smtp:smtp
    environment:
      ROUNDCUBEMAIL_DEFAULT_HOST: imap
      ROUNDCUBEMAIL_SMTP_SERVER: smtp
      ROUNDCUBEMAIL_PLUGINS: archive,zipdownload,managesieve,password
      ROUNDCUBEMAIL_UPLOAD_MAX_FILESIZE: 100M
      ROUNDCUBEMAIL_DB_TYPE: mysql
      ROUNDCUBEMAIL_DB_HOST: db
      ROUNDCUBEMAIL_DB_USER: mail
      ROUNDCUBEMAIL_DB_PASSWORD: BGun02otSchuj3z
      ROUNDCUBEMAIL_DB_NAME: postfix
    labels:
      - "traefik.frontend.rule=Host:mail.creditcards.bayern"
      - "traefik.port=80"

  admin:
    container_name: admin
    links:
      - db:db
    depends_on:
      - db
    image: hardware/postfixadmin:latest
    expose:
      - "8888"
    restart: always
    environment:
      DBTYPPE: mysql
      DBHOST: db
      DBUSER: mail
      DBNAME: postfix
      DBPASS: BGun02otSchuj3z
      SMTPHOST: smtp
      DOMAIN: creditcards.bayern
    labels:
      - "traefik.frontend.rule=Host:admin.creditcards.bayern"
      - "traefik.port=8888"
  
  db:
    container_name: mariadb
    image: mariadb:10.3
    restart: always
    environment:
      MYSQL_ROOT_PASSWORD: root_password
      MYSQL_DATABASES: "postfix mailman"
      MYSQL_USER: mail
      MYSQL_PASSWORD: db_password
    volumes:
      - database:/var/lib/mysql
      - ./docker-entrypoint.sh:/docker-entrypoint.sh
    labels:
      - "traefik.enable=false"

  mailman-core:
    image: maxking/mailman-core:latest
    container_name: mailman-core
    hostname: mailman-core
    volumes:
      - /data/mailserver/mailman/core:/opt/mailman/
      - ./mailman-extra.cfg:/opt/mailman/core/mailman-extra.cfg
    links:
     - db
     - smtp
     - imap
    depends_on:
      - db
    environment:
      - DATABASE_URL=mysql://mail:db_password@db/mailman
      - DATABASE_TYPE=mysql
      - DATABASE_CLASS=mailman.database.mysql.MySQLDatabase
      - HYPERKITTY_API_KEY=someapikey
    labels:
      - "traefik.enable=false"

  mailman-web:
    image: maxking/mailman-web:latest
    container_name: mailman-web
    hostname: mailman-web
    expose:
      - 8000
      - 8080
    depends_on:
      - db
    links:
      - mailman-core:mailman-core
      - db:db
    volumes:
      - /data/mailserver/mailman/web:/opt/mailman-web-data
    environment:
      - DATABASE_URL=mysql://mail:db_password@db/mailman
      - DATABASE_TYPE=mysql   
      - HYPERKITTY_API_KEY=someapikey
      - SECRET_KEY=thisisaverysecretkey
      - DYLD_LIBRARY_PATH=/usr/local/mysql/lib/
      - SERVE_FROM_DOMAIN=lists.creditcards.bayern
      - DJANGO_ALLOWED_HOSTS=mailman.creditcards.bayern
      - MAILMAN_ADMIN_USER=admin
      - MAILMAN_ADMIN_EMAIL=a3x@eris.cc
      - UWSGI_STATIC_MAP=/static=/opt/mailman-web-data/static
    labels:
      #- "traefik.frontend.rule=Host:mailman.creditcards.bayern"
      #- "traefik.port=8000"
      - "traefik.enable=false"
  
    
  nginx:
    container_name: nginx
    image: nginx:mainline
    restart: always
    expose:
      - 80
    links:
      - mailman-web:mailman-web
    volumes:
      - ./nginx/:/etc/nginx/conf.d/
      - /data/mailserver/mailman/web:/opt/mailman/
    labels:
      - "traefik.frontend.rule=Host:mailman.creditcards.bayern"
      - "traefik.port=80"




  traefik:
    container_name: traefik
    image: traefik  # The official Traefik docker image
    command: --api --docker  # Enables the web UI and tells Traefik to listen to docker
    restart: always
    ports:
      - "80:80"      # The HTTP port
      - "443:443"
      - "8080:8080"  # The Web UI (enabled by --api)
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock  # So that Traefik can listen to the Docker events
      - ./traefik/:/etc/traefik
    labels:
      - "traefik.frontend.rule=Host:traefik.creditcards.bayern"

  extractor:
    container_name: extractor
    image: danielhuisman/traefik-certificate-extractor
    volumes: 
      - /data/mailserver/traefik:/app/data
      - certs:/app/certs_flat
    labels:
      - "traefik.enable=false"



volumes:
  database:
  mails:
  certs:
  spam: