version: '3'

services:
  onlyoffice-document-server:
    container_name: onlyoffice-document-server
    image: onlyoffice/documentserver
    restart: unless-stopped
    environment:
      - JWT_ENABLED
      - JWT_SECRET
    volumes:
      - document_data:/var/www/onlyoffice/Data
      - document_log:/var/log/onlyoffice
    labels:
        - "traefik.enable=true"
        - "traefik.docker.network=traefik_public"
        - "traefik.http.routers.onlyoffice.rule=Host(`{{ onlyoffice_virtual_host }}`)"
        - "traefik.http.routers.onlyoffice.entrypoints=websecure"
        - "traefik.http.routers.onlyoffice.tls=true"
        - "traefik.http.routers.onlyoffice.tls.certresolver=defaultresolver"
{% if onlyoffice_allow_origin_list %}
        - "traefik.http.middlewares.onlyoffice-headers.headers.accesscontrolalloworiginlist={{ onlyoffice_allow_origin_list }}"
{% endif %}
        - "traefik.http.middlewares.onlyoffice-headers.headers.customrequestheaders.X-Forwarded-Proto=https"
        - "traefik.http.routers.onlyoffice.middlewares=onlyoffice-headers"
    networks:
      public:

volumes:
  document_data:
  document_log:

networks:
  public:
    external:
      name: traefik_public