networks:
  proxy_network:
    enable_ipv6: true
    name: proxy_network

services:
  caddy:
    image: caddy
    container_name: caddy
    restart: unless-stopped
    ports:
      - 80:80
      - 443:443
      - 2019:2019
    volumes:
      - /app-config/caddy/data:/data
      - /app-config/caddy/config:/config
      - /app-config/caddy/logs:/var/log/caddy/
      - /app-config/caddy/Caddyfile:/etc/caddy/Caddyfile
    networks:
      - proxy_network

  caddy_accesslog:
    image: alpine
    container_name: caddy_accesslog
    command: /bin/sh -c "apk add --no-cache coreutils && tail -n 0 -F /var/log/caddy/access.log"
    volumes:
      - /app-config/caddy/logs:/var/log/caddy:ro   # Read-only Mount des Emby Config/Logs
    restart: unless-stopped

  crowdsec:
    image: crowdsecurity/crowdsec
    container_name: crowdsec
    restart: always
    environment:
      COLLECTIONS: "crowdsecurity/caddy"
    volumes:
      #- /app-config/crowdsec/acquis.yaml:/etc/crowdsec/acquis.yaml
      - /app-config/caddy/logs:/var/log/caddy/
      - /app-config/crowdsec/crowdsec-db:/var/lib/crowdsec/data/
      - /app-config/crowdsec/crowdsec-config:/etc/crowdsec/
    networks:
      - proxy_network
      
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: always
    environment:
      DOMAIN: "https://vault.sascha-lutz.de"  # Your domain; vaultwarden needs to know it's https to work properly with attachments
      SIGNUPS_ALLOWED: "false"
      INVITATIONS_ALLOWED: "false"
      LOG_FILE: "/var/log/vaultwarden.log"
      ADMIN_TOKEN: "PCcYIigLuigPUADoW5lXESIbVZEvjplpFXmAj0UZ505Th1ta0LWmPc8lAyAXUIp3"
    volumes:
      - /app-config/vw-data:/data
    networks:
      - proxy_network

  homepage:
    image: ghcr.io/gethomepage/homepage:latest
    container_name: homepage
    ports:
      - 3000:3000
    volumes:
      - /app-config/homepage/:/app/config # Make sure your local config directory exists
      - /var/run/docker.sock:/var/run/docker.sock # (optional) For docker integrations, see alternative methods
    environment:
      HOMEPAGE_ALLOWED_HOSTS: home.sascha-lutz.de # required, may need port. See gethomepage.dev/installation/#homepage_allowed_hosts
      PUID: 1000
      PGID: 1000
    networks:
      - proxy_network