---
version: "3.5"

services:
  penpot-frontend:
    container_name: {{ customer }}-penpot-frontend
    image: "penpotapp/frontend:latest"
    restart: always
    labels:
      - "diun.enable=true"
    ports:
      - '127.0.0.1:3021:80'
    volumes:
      - {{ customer }}-penpot-assets:/opt/data/assets
    depends_on:
      - penpot-backend
      - penpot-exporter
    # labels:
    #   - "traefik.enable=true"
    environment:
      - PENPOT_FLAGS=enable-registration enable-login-with-password
    networks:
      {{ customer }}-penpot:
        ipv4_address: 172.20.10.2

  penpot-backend:
    container_name: {{ customer }}-penpot-backend
    image: "penpotapp/backend:latest"
    restart: always
    volumes:
      - {{ customer }}-penpot-assets:/opt/data/assets
      - {{ customer }}-penpot-backups:/tmp/backups
    depends_on:
      - penpot-postgres
      - penpot-redis
    environment:
      - PENPOT_FLAGS=enable-registration enable-login-with-password disable-email-verification enable-smtp enable-prepl-server
      - PENPOT_SECRET_KEY={{ penpot_secret_key }}
      - PENPOT_TELEMETRY_ENABLED=false
      # - PENPOT_PREPL_HOST=0.0.0.0
      - PENPOT_PUBLIC_URI=https://{{ domain_penpot }} #http://localhost:9001
      ## Database
      - PENPOT_DATABASE_URI=postgresql://{{ customer }}-penpot-postgres/penpot
      - PENPOT_DATABASE_USERNAME={{ penpot_db_user }}
      - PENPOT_DATABASE_PASSWORD={{ penpot_db_password }}
      - PENPOT_REDIS_URI=redis://{{ customer }}-penpot-redis/0
      - PENPOT_ASSETS_STORAGE_BACKEND=assets-fs
      - PENPOT_STORAGE_ASSETS_FS_DIRECTORY=/opt/data/assets
      ## S3
      # - AWS_ACCESS_KEY_ID=<KEY_ID>
      # - AWS_SECRET_ACCESS_KEY=<ACCESS_KEY>
      # - PENPOT_ASSETS_STORAGE_BACKEND=assets-s3
      # - PENPOT_STORAGE_ASSETS_S3_ENDPOINT=http://penpot-minio:9000
      # - PENPOT_STORAGE_ASSETS_S3_BUCKET=<BUKET_NAME>
      ## SMTP
      - PENPOT_SMTP_DEFAULT_FROM=no-reply@{{ domain }}
      - PENPOT_SMTP_DEFAULT_REPLY_TO=support@{{ domain }}
      - PENPOT_SMTP_HOST=mail.{{ domain }}
      - PENPOT_SMTP_PORT=587
      - PENPOT_SMTP_USERNAME=
      - PENPOT_SMTP_PASSWORD=
      - PENPOT_SMTP_TLS=true
      - PENPOT_SMTP_SSL=false
    networks:
      {{ customer }}-penpot:
        ipv4_address: 172.20.10.3

  penpot-exporter:
    container_name: {{ customer }}-penpot-exporter
    image: "penpotapp/exporter:latest"
    restart: always
    environment:
      - PENPOT_PUBLIC_URI=http://{{ customer }}-penpot-frontend
      - PENPOT_REDIS_URI=redis://{{ customer }}-penpot-redis/0
    networks:
      {{ customer }}-penpot:
        ipv4_address: 172.20.10.4

  penpot-postgres:
    container_name: {{ customer }}-penpot-postgres
    image: "postgres:15"
    restart: always
    stop_signal: SIGINT
    volumes:
      - {{ customer }}-penpot-postgres:/var/lib/postgresql/data
      - {{ customer }}-penpot-backups:/tmp/backups
    environment:
      - POSTGRES_INITDB_ARGS=--data-checksums
      - POSTGRES_DB=penpot
      - POSTGRES_USER={{ penpot_db_user }}
      - POSTGRES_PASSWORD={{ penpot_db_password }}
    networks:
      {{ customer }}-penpot:
        ipv4_address: 172.20.10.5

  penpot-redis:
    container_name: {{ customer }}-penpot-redis
    image: redis:7
    restart: always
    networks:
      {{ customer }}-penpot:
        ipv4_address: 172.20.10.6

  # penpot-mailcatch:
  #   container_name: {{ customer }}-penpot-mailcatch
  #   image: sj26/mailcatcher:latest
  #   restart: always
  # #   expose:
  # #     - '1025'
  #   ports:
  #     - "127.0.0.1:3048:1080"
  #   networks:
  #     {{ customer }}-penpot:
  #       ipv4_address: 172.20.10.7

networks:
  {{ customer }}-penpot:
    ipam:
      driver: default
      config:
        - subnet: 172.20.10.0/28
          gateway: 172.20.10.1

# networks:
#   penpot:

volumes: 
  {{ customer }}-penpot-assets:
  {{ customer }}-penpot-postgres:
  {{ customer }}-penpot-backups:

## Relevant flags for frontend:
## - demo-users
## - login-with-github
## - login-with-gitlab
## - login-with-google
## - login-with-ldap
## - login-with-oidc
## - login-with-password
## - registration
## - webhooks
##
## You can read more about all available flags on:
## https://help.penpot.app/technical-guide/configuration/#advanced-configuration

##Environment variables
## Relevant flags for backend:
## - demo-users
## - email-verification
## - log-emails
## - log-invitation-tokens
## - login-with-github
## - login-with-gitlab
## - login-with-google
## - login-with-ldap
## - login-with-oidc
## - login-with-password
## - registration
## - secure-session-cookies
## - smtp
## - smtp-debug
## - telemetry
## - webhooks
## - prepl-server
## https://help.penpot.app/technical-guide/configuration/#advanced-configuration