services:
  crowdsec:
    image: crowdsecurity/crowdsec:latest
    restart: always
    environment:
      GID: "1000"
      COLLECTIONS: crowdsecurity/caddy crowdsecurity/linux crowdsecurity/nextcloud
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./crowdsec/acquis.yaml:/etc/crowdsec/acquis.yaml:ro
      - crowdsec_db:/var/lib/crowdsec/data
      - caddy_logs:/var/log/caddy:ro
    networks:
      - proxy
    healthcheck:
      test: ["CMD", "cscli", "version"]
      interval: 10s
      timeout: 5s
      retries: 5

  caddy:
    build:
      context: .
      dockerfile: Dockerfile
    restart: always
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile
      - caddy_data:/data
      - caddy_config:/config
      - caddy_logs:/var/log/caddy
    environment:
      CROWDSEC_API_KEY: ${CROWDSEC_API_KEY}
    depends_on:
      crowdsec:
        condition: service_healthy
    networks:
      - proxy
      - immich_default
      - zitadel
      - vw_default
      - zipline_default

volumes:
  crowdsec_db:
  caddy_data:
  caddy_config:
  caddy_logs:

networks:
  proxy:
    driver: bridge
  immich_default:
    external: true
    name: immich_default
  zitadel:
    external: true
    name: zitadel
  vw_default:
    external: true
    name: vw_default
  zipline_default:
    external: true
    name: zipline_default