version: "3"

services:
    reverse_caddy:
        image: caddy:2.11-alpine
        ports:
            - "80:80"
            - "443:443"
            - "443:443/udp"
        configs:
            - source: caddy_config
              target: /etc/caddy/Caddyfile
            - source: caddy_portfolio_html
              target: /www/html/index.html
        volumes:
            - reversecaddydata:/data
            - reversecaddyconfig:/config
        networks:
            - reverse_network
            - prometheus_network

    wireguard_server:
        image: linuxserver/wireguard
        cap_add:
            - NET_ADMIN
            - SYS_MODULE
        configs:
            - source: wireguard_coredns_config
              target: /coredns-source/Corefile
        entrypoint:
            - /bin/sh
            - -c
            - >-
                mkdir -p /config/coredns &&
                cp /coredns-source/Corefile /config/coredns/Corefile &&
                exec /init
        environment:
            PUID: 1000
            PGID: 1000
            TZ: Europe/Paris
            SERVEURURL: wireguard.qpismont.fr
            SERVERPORT: 51820
            PEERS: 1
            PEERDNS: auto
            INTERNAL_SUBNET: 10.13.13.0/24
        volumes:
            - /home/user/wireguard-config:/config
            - /lib/modules:/lib/modules
        ports:
            - 51820:51820/udp
        sysctls:
            - net.ipv4.conf.all.src_valid_mark=1
        networks:
            - wireguard_network

configs:
    caddy_config:
        name: caddy_config_${DATETIME}
        file: ./Caddyfile
    wireguard_coredns_config:
        name: wireguard_coredns_config_${DATETIME}
        file: ./wireguard/CoreDns
    caddy_portfolio_html:
        name: caddy_portfolio_html_${DATETIME}
        file: ./portfolio/index.html

volumes:
    reversecaddyconfig:
    reversecaddydata:

networks:
    reverse_network:
        external: true
    wireguard_network:
        external: true
    prometheus_network:
        external: true