{% set env='mailu.env' %}
# This file is auto-generated by the Mailu configuration wizard.
# Please read the documentation before attempting any change.
# Generated for {{ flavor }} flavor

version: '2.2'

services:

  # External dependencies
  redis:
    image: redis:alpine
    restart: always
    volumes:
      - "{{ root }}/redis:/data"
    {% if resolver_enabled %}
    depends_on:
      - resolver
    dns:
      - {{ dns }}
    {% endif %}

  # Core services
  front:
    image: ${DOCKER_ORG:-ghcr.io/mailu}/${DOCKER_PREFIX:-}nginx:${MAILU_VERSION:-{{ version }}}
    restart: always
    env_file: {{ env }}
    logging:
      driver: journald
      options:
        tag: mailu-front
    ports:
    {% for port in (80, 443, 25, 465, 587, 110, 995, 143, 993, 4190) %}
    {% if bind4 %}
      - "{{ bind4 }}:{{ port }}:{{ port }}"
    {% endif %}
    {% if ipv6_enabled and bind6 %}
      - "[{{ bind6 }}]:{{ port }}:{{ port }}"
    {% endif %}
    {% endfor %}
    networks:
      - default
{% if webmail_type != 'none' %}
      - webmail
{% endif %}
{% if webdav_enabled %}
      - radicale
{% endif %}
    volumes:
      - "{{ root }}/certs:/certs"
      - "{{ root }}/overrides/nginx:/overrides:ro"
    {% if resolver_enabled %}
    depends_on:
      - resolver
    dns:
      - {{ dns }}

  resolver:
    image: ${DOCKER_ORG:-ghcr.io/mailu}/${DOCKER_PREFIX:-}unbound:${MAILU_VERSION:-{{ version }}}
    env_file: {{ env }}
    logging:
      driver: journald
      options:
        tag: mailu-resolver
    restart: always
    networks:
      default:
        ipv4_address: {{ dns }}
    {% endif %}

  admin:
    image: ${DOCKER_ORG:-ghcr.io/mailu}/${DOCKER_PREFIX:-}admin:${MAILU_VERSION:-{{ version }}}
    restart: always
    env_file: {{ env }}
    logging:
      driver: journald
      options:
        tag: mailu-admin
    {% if not admin_enabled %}
    ports:
      - 127.0.0.1:8080:80
    {% endif %}
    volumes:
      - "{{ root }}/data:/data"
      - "{{ root }}/dkim:/dkim"
    depends_on:
      - redis
    {% if resolver_enabled %}
      - resolver
    dns:
      - {{ dns }}
    {% endif %}

  imap:
    image: ${DOCKER_ORG:-ghcr.io/mailu}/${DOCKER_PREFIX:-}dovecot:${MAILU_VERSION:-{{ version }}}
    restart: always
    env_file: {{ env }}
    logging:
      driver: journald
      options:
        tag: mailu-imap
    volumes:
      - "{{ root }}/mail:/mail"
      - "{{ root }}/overrides/dovecot:/overrides:ro"
    networks:
      - default
    {% if tika_enabled %}
      - fts_attachments
    {% endif %}
    depends_on:
      - front
    {% if tika_enabled %}
      - fts_attachments
    {% endif %}
    {% if resolver_enabled %}
      - resolver
    dns:
      - {{ dns }}
    {% endif %}

  smtp:
    image: ${DOCKER_ORG:-ghcr.io/mailu}/${DOCKER_PREFIX:-}postfix:${MAILU_VERSION:-{{ version }}}
    restart: always
    env_file: {{ env }}
    logging:
      driver: journald
      options:
        tag: mailu-smtp
    volumes:
      - "{{ root }}/mailqueue:/queue"
      - "{{ root }}/overrides/postfix:/overrides:ro"
    depends_on:
      - front
    {% if resolver_enabled %}
      - resolver
    dns:
      - {{ dns }}
    {% endif %}

{% if oletools_enabled %}
  oletools:
    image: ${DOCKER_ORG:-ghcr.io/mailu}/${DOCKER_PREFIX:-}oletools:${MAILU_VERSION:-{{ version }}}
    hostname: oletools
    logging:
      driver: journald
      options:
        tag: mailu-oletools
    restart: always
    networks:
      - oletools
    depends_on:
    {% if resolver_enabled %}
      - resolver
    dns:
      - {{ dns }}
    {% endif %}
{% endif %}

{% if tika_enabled %}
  fts_attachments:
    image: ghcr.io/paperless-ngx/tika:2.9.0-full
    hostname: tika
    logging:
      driver: journald
      options:
        tag: mailu-tika
    restart: always
    networks:
      - fts_attachments
    depends_on:
    {% if resolver_enabled %}
      - resolver
    dns:
      - {{ dns }}
    {% endif %}
    healthcheck:
      test: ["CMD-SHELL", "wget -nv -t1 -O /dev/null http://127.0.0.1:9998/tika || exit 1"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 10s
{% endif %}

  antispam:
    image: ${DOCKER_ORG:-ghcr.io/mailu}/${DOCKER_PREFIX:-}rspamd:${MAILU_VERSION:-{{ version }}}
    hostname: antispam
    restart: always
    env_file: {{ env }}
    logging:
      driver: journald
      options:
        tag: mailu-antispam
    networks:
      - default
{% if oletools_enabled %}
      - oletools
{% endif %}
{% if antivirus_enabled %}
      - clamav
{% endif %}
    volumes:
      - "{{ root }}/filter:/var/lib/rspamd"
      - "{{ root }}/overrides/rspamd:/overrides:ro"
    depends_on:
      - front
      - redis
    {% if oletools_enabled %}
      - oletools
    {% endif %}
    {% if antivirus_enabled %}
      - antivirus
    {% endif %}
    {% if resolver_enabled %}
      - resolver
    dns:
      - {{ dns }}
    {% endif %}

  # Optional services
  {% if antivirus_enabled %}
  antivirus:
    image: clamav/clamav-debian:1.2.0-6
    restart: always
    logging:
      driver: journald
      options:
        tag: mailu-antivirus
    networks:
      - clamav
    volumes:
      - "{{ root }}/filter/clamav:/var/lib/clamav"
    healthcheck:
      test: ["CMD-SHELL", "kill -0 `cat /tmp/clamd.pid` && kill -0 `cat /tmp/freshclam.pid`"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 10s
  {% endif %}

  {% if webdav_enabled %}
  webdav:
    image: ${DOCKER_ORG:-ghcr.io/mailu}/${DOCKER_PREFIX:-}radicale:${MAILU_VERSION:-{{ version }}}
    restart: always
    logging:
      driver: journald
      options:
        tag: mailu-webdav
    volumes:
      - "{{ root }}/dav:/data"
    networks:
      - radicale
  {% endif %}

  {% if fetchmail_enabled %}
  fetchmail:
    image: ${DOCKER_ORG:-ghcr.io/mailu}/${DOCKER_PREFIX:-}fetchmail:${MAILU_VERSION:-{{ version }}}
    restart: always
    env_file: {{ env }}
    logging:
      driver: journald
      options:
        tag: mailu-fetchmail
    volumes:
      - "{{ root }}/data/fetchmail:/data"
    depends_on:
      - admin
      - smtp
      - imap
    {% if resolver_enabled %}
      - resolver
    dns:
      - {{ dns }}
    {% endif %}
  {% endif %}

  # Webmail
  {% if webmail_type != 'none' %}
  webmail:
    image: ${DOCKER_ORG:-ghcr.io/mailu}/${DOCKER_PREFIX:-}webmail:${MAILU_VERSION:-{{ version }}}
    restart: always
    env_file: {{ env }}
    logging:
      driver: journald
      options:
        tag: mailu-webmail
    volumes:
      - "{{ root }}/webmail:/data"
      - "{{ root }}/overrides/{{ webmail_type }}:/overrides:ro"
    networks:
      - webmail
    depends_on:
      - front
  {% endif %}

networks:
  default:
    {% if ipv6_enabled %}
    enable_ipv6: true
    {% endif %}
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: {{ subnet }}
        {% if ipv6_enabled %}
        - subnet: {{ subnet6 }}
        {% endif %}
{% if webdav_enabled %}
  radicale:
    driver: bridge
{% endif %}
{% if webmail_type != 'none' %}
  webmail:
    driver: bridge
{% endif %}
{% if antivirus_enabled %}
  clamav:
    driver: bridge
{% endif %}
{% if oletools_enabled %}
  oletools:
    driver: bridge
    internal: true
{% endif %}
{% if tika_enabled %}
  fts_attachments:
    driver: bridge
    internal: true
{% endif %}