---
services:
  dashboard:
    image: netbirdio/dashboard:v2.15.0
    restart: unless-stopped
    ports:
      - 8005:80
    environment:
      NETBIRD_MGMT_API_ENDPOINT: ${NETBIRD_MGMT_API_ENDPOINT:-https://vpn.fukurokuju.dev}
      NETBIRD_MGMT_GRPC_API_ENDPOINT: ${NETBIRD_MGMT_GRPC_API_ENDPOINT:-https://vpn.fukurokuju.dev}
      AUTH_AUDIENCE: ${NETBIRD_AUTH_AUDIENCE:-64e44b85ebdec2a3cf87c0c9916e2dbb0570f6d87b03ca8d149c3551565c3057ce1e559d16b5399cb7df60646e4e2bc6515842a198efb09d1620ea9ac1d8ace2}  # yamllint disable rule:line-length
      AUTH_CLIENT_ID: ${NETBIRD_AUTH_CLIENT_ID:-64e44b85ebdec2a3cf87c0c9916e2dbb0570f6d87b03ca8d149c3551565c3057ce1e559d16b5399cb7df60646e4e2bc6515842a198efb09d1620ea9ac1d8ace2}  # yamllint disable rule:line-length
      AUTH_AUTHORITY: ${NETBIRD_AUTH_AUTHORITY:-https://auth.fukurokuju.dev/application/o/netbird/}
      USE_AUTH0: false
      AUTH_SUPPORTED_SCOPES: ${NETBIRD_AUTH_SUPPORTED_SCOPES:-api offline_access openid email profile}
      AUTH_REDIRECT_URI:
      AUTH_SILENT_REDIRECT_URI:
      NETBIRD_TOKEN_SOURCE: accessToken
      NGINX_SSL_PORT: 443
    logging:
      driver: "json-file"
      options:
        max-size: "500m"
        max-file: "2"
  signal:
    image: netbirdio/signal:0.55.1
    restart: unless-stopped
    volumes:
      - netbird-signal:/var/lib/netbird
    ports:
      - "10000:80"
    logging:
      driver: "json-file"
      options:
        max-size: "500m"
        max-file: "2"
  relay:
    image: netbirdio/relay:0.57.0
    restart: unless-stopped
    environment:
      NB_LOG_LEVEL: ${NB_LOG_LEVEL:-info}
      NB_LISTEN_ADDRESS: ${NB_LISTEN_ADDRESS:-:33080}
      NB_EXPOSED_ADDRESS: ${NB_EXPOSED_ADDRESS:-vpn.fukurokuju.dev:33080}
      NB_AUTH_SECRET: ${NB_AUTH_SECRET}
    ports:
      - "33080:33080"
    logging:
      driver: "json-file"
      options:
        max-size: "500m"
        max-file: "2"
  management:
    image: netbirdio/management:0.54.0
    restart: unless-stopped
    depends_on:
      - dashboard
    volumes:
      - ${NETBIRD_MANAGEMENT_VOLUME:-/mnt/nas1/shared/netbird/management}/data:/var/lib/netbird
      - ${NETBIRD_MANAGEMENT_VOLUME:-/mnt/nas1/shared/netbird/management}/management.json:/etc/netbird/management.json:z
    ports:
      - "33073:443"
    command: [
      "--port", "443",
      "--log-file", "console",
      "--log-level", "info",
      "--disable-anonymous-metrics=false",
      "--single-account-mode-domain=vpn.fukurokuju.dev",
      "--dns-domain=netbird.fuku",
    ]
    logging:
      driver: "json-file"
      options:
        max-size: "500m"
        max-file: "2"
    environment:
      - NETBIRD_STORE_ENGINE_POSTGRES_DSN=

  coturn:
    image: coturn/coturn:4.7
    restart: unless-stopped
    domainname: vpn.fukurokuju.dev
    volumes:
      - ${NETBIRD_COTURN_VOLUME:-/mnt/nas1/shared/netbird/coturn}/turnserver.conf:/etc/turnserver.conf:ro
    network_mode: host
    command:
      - -c /etc/turnserver.conf
    logging:
      driver: "json-file"
      options:
        max-size: "500m"
        max-file: "2"

  peer-1:
    image: netbirdio/netbird:0.54.0
    restart: unless-stopped
    volumes:
      - ${NETBIRD_PEER_VOLUME:-/mnt/nas1/shared/netbird/peer-1}/data:/etc/netbird
    environment:
      NB_MANAGEMENT_URL: https://vpn.fukurokuju.dev:443
      NB_SETUP_KEY: ${NB_SETUP_KEY}
    cap_add:
      - NET_ADMIN
    depends_on:
      - management
      - dashboard
      - relay
      - signal
      - coturn

volumes:
  netbird-mgmt:
  netbird-signal: