version: "3.7"

services:
        
###########################################################################
###########################################################################
##
##    Docker Compose File: Dumbledore Services
##    Function: Run Dumbledore Services
##
###########################################################################
###########################################################################
#  portainer:
#    image: portainer/portainer-ce:latest
#    container_name: portainer
#    hostname: portainer
#    restart: unless-stopped
#    runtime: runc
#    volumes:
#      - portainer_data:/data
#      - /var/run/docker.sock:/var/run/docker.sock:ro
#    ports:
#      - 8000:8000
#      - 9443:9443
#    expose:
#      - "9000"
#    working_dir: /
#    networks:
#      - proxy

  caddy:
    image: caddy:latest
    container_name: caddyv2
    hostname: caddy
    restart: unless-stopped
    runtime: runc
    command: caddy run --config /etc/caddy/Caddyfile --adapter caddyfile
    working_dir: /srv
    volumes:
      - /home/albus/caddy/data:/data
      - /home/albus/caddy/Caddyfile:/etc/caddy/Caddyfile
      - /home/albus/logs/caddy:/var/log
      - /home/albus/goaccess/html/:/srv
      - /home/albus/caddy/config:/config
    expose:
      - 2019
      - 443/udp
    ports:
      - 443:443
      - 7890:7890
      - 80:80
    cap_add:
      - AUDIT_WRITE
      - CHOWN
      - DAC_OVERRIDE
      - FOWNER
      - FSETID
      - KILL
      - MKNOD
      - NET_BIND_SERVICE
      - NET_RAW
      - SETFCAP
      - SETGID
      - SETPCAP
      - SETUID
      - SYS_CHROOT
    cap_drop:
      - AUDIT_CONTROL
      - BLOCK_SUSPEND
      - DAC_READ_SEARCH
      - IPC_LOCK
      - IPC_OWNER
      - LEASE
      - LINUX_IMMUTABLE
      - MAC_ADMIN
      - MAC_OVERRIDE
      - NET_ADMIN
      - NET_BROADCAST
      - SYSLOG
      - SYS_ADMIN
      - SYS_BOOT
      - SYS_MODULE
      - SYS_NICE
      - SYS_PACCT
      - SYS_PTRACE
      - SYS_RAWIO
      - SYS_RESOURCE
      - SYS_TIME
      - SYS_TTY_CONFIG
      - WAKE_ALARM
    networks:
      - proxy

  watchtower:
    image: containrrr/watchtower:latest
    container_name: watchtower
    hostname: watchtower
    mac_address: 02:42:ac:11:00:02
    network_mode: bridge
    restart: unless-stopped
    working_dir: /
    runtime: runc
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    expose:
      - "8080"
    environment:
      - WATCHTOWER_CLEANUP=true
    cap_add:
      - AUDIT_WRITE
      - CHOWN
      - DAC_OVERRIDE
      - FOWNER
      - FSETID
      - KILL
      - MKNOD
      - NET_BIND_SERVICE
      - NET_RAW
      - SETFCAP
      - SETGID
      - SETPCAP
      - SETUID
      - SYS_CHROOT
    cap_drop:
      - AUDIT_CONTROL
      - BLOCK_SUSPEND
      - DAC_READ_SEARCH
      - IPC_LOCK
      - IPC_OWNER
      - LEASE
      - LINUX_IMMUTABLE
      - MAC_ADMIN
      - MAC_OVERRIDE
      - NET_ADMIN
      - NET_BROADCAST
      - SYSLOG
      - SYS_ADMIN
      - SYS_BOOT
      - SYS_MODULE
      - SYS_NICE
      - SYS_PACCT
      - SYS_PTRACE
      - SYS_RAWIO
      - SYS_RESOURCE
      - SYS_TIME
      - SYS_TTY_CONFIG
      - WAKE_ALARM

  themes:
    image: ghcr.io/themepark-dev/theme.park:latest
    container_name: theme-park
    volumes:
      - /home/albus/themepark:/config
    ports:
      - 4000:80
      - 4001:443
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=America/New_York
    networks:
      - proxy
    depends_on:
      caddy:
        condition: service_healthy
        restart: true
include:
  - /home/albus/compose/bitwarden/vaultwarden.yaml
  - /home/albus/compose/stats/stats.yaml
  - /home/albus/compose/ombi/ombi.yaml
  - /home/albus/compose/gitea/gitea.yaml
  - /home/albus/compose/mealie/mealie.yaml
  - /home/albus/compose/syslog/syslog.yaml
  - /home/albus/compose/qbittorrent/qbittorrent.yaml
  - /home/albus/compose/znc/znc.yaml
networks:
  proxy:
    external: true
    name: proxy