version: '3'

services:
  onlyoffice-document-server:
    image: onlyoffice/documentserver
    container_name: onlyoffice-document-server{{ onlyoffice_multitenant_label }}
    hostname: onlyoffice-document-server{{ onlyoffice_multitenant_label }}
    restart: unless-stopped
    environment:
      - JWT_ENABLED
      - JWT_SECRET
    volumes:
      - document_data{{ onlyoffice_multitenant_label }}:/var/www/onlyoffice/Data
      - document_log{{ onlyoffice_multitenant_label }}:/var/log/onlyoffice
    labels:
        - "traefik.enable=true"
        - "traefik.docker.network=traefik_public"
        - "traefik.http.routers.onlyoffice{{ onlyoffice_multitenant_label }}.rule=Host(`{{ onlyoffice_virtual_host }}`)"
        - "traefik.http.routers.onlyoffice{{ onlyoffice_multitenant_label }}.entrypoints=websecure"
        - "traefik.http.routers.onlyoffice{{ onlyoffice_multitenant_label }}.tls=true"
        - "traefik.http.routers.onlyoffice{{ onlyoffice_multitenant_label }}.tls.certresolver=defaultresolver"
{% if onlyoffice_allow_origin_list %}
        - "traefik.http.middlewares.onlyoffice{{ onlyoffice_multitenant_label }}-headers.headers.accesscontrolalloworiginlist={{ onlyoffice_allow_origin_list }}"
{% endif %}
        - "traefik.http.middlewares.onlyoffice{{ onlyoffice_multitenant_label }}-headers.headers.customrequestheaders.X-Forwarded-Proto=https"
        - "traefik.http.routers.onlyoffice{{ onlyoffice_multitenant_label }}.middlewares=onlyoffice{{ onlyoffice_multitenant_label }}-headers"
    networks:
      public:

volumes:
  document_data{{ onlyoffice_multitenant_label }}:
  document_log{{ onlyoffice_multitenant_label }}:

networks:
  public:
    external:
      name: traefik_public