version: '3'
services:

  cryptpad:
    image: "cryptpad/cryptpad:latest"
    hostname: cryptpad

    ports:
      - "3344:3000"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.cryptpad-http.entrypoints=http"
      - "traefik.http.routers.cryptpad-http.rule=Host(`cryptpad.docker.lab`)"
      - "traefik.http.routers.cryptpad-http.middlewares=cryptpad@docker"
      - "traefik.http.services.cryptpad-http.loadbalancer.server.port=3000"
      - "traefik.http.middlewares.cryptpad.redirectscheme.scheme=https"
      - "traefik.http.middlewares.cryptpad.headers.SSLRedirect=true"
      - "traefik.http.routers.cryptpad.entrypoints=https"
      - "traefik.http.routers.cryptpad.rule=Host(`cryptpad.docker.lab`)"
      - "traefik.http.routers.cryptpad.tls=true"
      - "traefik.docker.network=traefik_proxy"
    environment:
      - USE_SSL=false
      - STORAGE=./storage/file
      - LOG_TO_STDOUT=true
      - CPAD_MAIN_DOMAIN=https://cryptpad.docker.lab
      - CPAD_SANDBOX_DOMAIN=https://cryptpad.docker.lab
      - CPAD_CONF=/cryptpad/config/config.js
      - CPAD_INSTALL_ONLYOFFICE=yes
    restart: always
    volumes:
      - ./data/files:/cryptpad/datastore:rw
      - ./data/customize:/cryptpad/customize:rw
      - ./data/blob:/cryptpad/blob:rw
      - ./data/block:/cryptpad/block:rw
      - ./data/data:/cryptpad/data:rw
      - ./onlyoffice-dist:/cryptpad/www/common/onlyoffice/dist
      - ./onlyoffice-conf:/cryptpad/onlyoffice-conf
    networks:
      - traefik_proxy

networks:
  traefik_proxy:
    external:
      name: traefik_proxy