services:
  remnawave-nginx:
    image: nginx:1.26
    container_name: remnawave-nginx
    hostname: remnawave-nginx
    restart: always
    volumes:
      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
      - /etc/certwardenclient/certchain.pem:/etc/nginx/ssl/node/fullchain.pem:ro
      - /etc/certwardenclient/key.pem:/etc/nginx/ssl/node/privkey.pem:ro
      - /dev/shm:/dev/shm:rw
      - /var/www/html:/var/www/html:ro
    command: sh -c 'rm -f /dev/shm/nginx.sock && nginx -g "daemon off;"'
    networks: [node]
    depends_on:
      - remnanode
    logging:
      driver: 'json-file'
      options:
        max-size: '30m'
        max-file: '5'

  remnanode:
    image: remnawave/node:latest
    container_name: remnanode
    hostname: remnanode
    restart: always
    networks: [node]
    ports:
      - "443:443"
      - "443:443/udp" # HTTP/3
    env_file:
      - .env
    volumes:
      - /dev/shm:/dev/shm:rw
      - /var/log/remnanode:/var/log/remnanode
    logging:
      driver: 'json-file'
      options:
        max-size: '30m'
        max-file: '5'

  certwardenclient:
    image: ghcr.io/gregtwallace/certwarden-client:latest
    container_name: certwardenclient
    hostname: certwardenclient
    restart: always
    networks: [node]
    ports:
      - "5055:5055"
    env_file:
      - .env
    environment:
      - CW_CLIENT_CERT_NAME=${NODE_DOMAIN}
      - CW_CLIENT_KEY_NAME=${NODE_DOMAIN}
    volumes:
      - /etc/certwardenclient:/opt/certwarden/certs
      - /var/run/docker.sock:/var/run/docker.sock
    logging:
      driver: 'json-file'
      options:
        max-size: '30m'
        max-file: '5'
        
networks:
  node:
    external: true