services:
  tunnel:
    image: cloudflare/cloudflared
    command: tunnel --no-autoupdate run
    restart: unless-stopped
    environment:
      - TUNNEL_TOKEN=${TUNNEL_TOKEN}

  database:
    image: postgres:13.4-alpine
    environment:
      - POSTGRES_USER=hedgedoc
      - POSTGRES_PASSWORD=${DB_PASSWORD}
      - POSTGRES_DB=hedgedoc
    volumes:
      - ./data/database:/var/lib/postgresql/data
    restart: always

  app:
    image: quay.io/hedgedoc/hedgedoc:latest
    environment:
      - CMD_DB_URL=postgres://hedgedoc:${DB_PASSWORD}@database:5432/hedgedoc
      - CMD_DOMAIN=${DOMAIN}
      - CMD_URL_ADDPORT=false
      - TZ=America/Edmonton
      - CMD_SESSION_SECRET=${SECRET}
      # hint so that it knows it's being Cloudflare
      - CMD_PROTOCOL_USESSL=true
    volumes:
      - ./data/uploads:/hedgedoc/public/uploads
    restart: always
    depends_on:
      - database
volumes:
  database:
  uploads: