---
services:
  nextcloud:
    image: registry.kucharczyk.xyz/nextcloud:latest
    container_name: nextcloud
    networks:
      public:
        ipv4_address: 192.168.240.40
    depends_on:
      - postgres
    volumes:
      - "${DOCKER_STORAGE_PATH}/nextcloud/config:/var/www/html/config"
      - "${DOCKER_STORAGE_PATH}/nextcloud/data:/var/www/html/data"
      - "${DOCKER_STORAGE_PATH}/nextcloud/html:/var/www/html"
    environment:
      # caddy
      - TRUSTED_PROXIES=192.168.240.2
    labels:
      caddy: cloud.${DOMAIN}
      caddy.reverse_proxy: "{{ upstreams 80 }}"
      caddy.handle.redir_0: "/.well-known/carddav /remote.php/dav 301"
      caddy.handle.redir_1: "/.well-known/caldav /remote.php/dav 301"
      caddy.header.Strict-Transport-Security: "max-age=15552000; includeSubDomains"
    restart: unless-stopped