# OnlyOffice - Teljes értékű irodai csomag a böngészőben
# Domain: ${SUBDOMAIN}.${DOMAIN}
# Database: None (file-based)
# RAM: ~512M (mem_limit: 2048M) | Pi-compatible: No
#
# Environment variables:
#   DOMAIN          - Your domain (e.g., demo-felhom.eu)
#   JWT_SECRET      - JWT titkosítási kulcs (auto-generated)

services:
  onlyoffice:
    image: onlyoffice/documentserver:8.3.0
    container_name: onlyoffice
    restart: unless-stopped
    environment:
      - TZ=Europe/Budapest
      - JWT_SECRET=${JWT_SECRET}
    volumes:
      - onlyoffice_data:/var/www/onlyoffice/Data
      - onlyoffice_logs:/var/log/onlyoffice
    networks:
      - traefik-public
    deploy:
      resources:
        limits:
          memory: 2048M
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:80/healthcheck"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 30s
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.onlyoffice.rule=Host(`${SUBDOMAIN}.${DOMAIN}`)"
      - "traefik.http.routers.onlyoffice.entrypoints=websecure"
      - "traefik.http.routers.onlyoffice.tls=true"
      - "traefik.http.routers.onlyoffice.tls.certresolver=letsencrypt"
      - "traefik.http.routers.onlyoffice.middlewares=onlyoffice-headers"
      - "traefik.http.middlewares.onlyoffice-headers.headers.customrequestheaders.X-Forwarded-Proto=https"
      - "traefik.http.services.onlyoffice.loadbalancer.server.port=80"

volumes:
  onlyoffice_data:
  onlyoffice_logs:

networks:
  traefik-public:
    external: true