name: accel-ppp

services:
  sstp:
    build: ./sstp
    volumes:
      - ./accel-ppp.conf:/etc/accel-ppp.conf:ro
      - ./chap-secrets:/etc/ppp/chap-secrets:ro
      - ./cert.pem:/etc/cert.pem:ro
      - ./privkey.pem:/etc/privkey.pem:ro
      - ./ca.pem:/etc/ca.pem:ro
    expose:
      - "443/tcp"
    devices:
      - "/dev/ppp:/dev/ppp:rwm"
    environment:
      VIRTUAL_HOST: "api.bearns.me"
      VIRTUAL_PROTO: "https"
      VIRTUAL_PORT: 443
    cap_add:
      - NET_ADMIN
    networks:
      - proxy-tier

  proxy:
    image: nginxproxy/nginx-proxy:alpine
    expose:
      - "443/tcp"
      - "80/tcp"
    ports:
      - "443:443/tcp"
    labels:
      - 'com.github.nginx-proxy.nginx'
    volumes:
      - certs:/etc/nginx/certs:rw
      - vhost.d:/etc/nginx/vhost.d
      - html:/usr/share/nginx/html
      - /var/run/docker.sock:/tmp/docker.sock:ro
    environment:
      - ENABLE_IPV6=true
      - TRUST_DOWNSTREAM_PROXY=true
    networks:
      - proxy-tier

networks:
  proxy-tier:

volumes:
  certs:
  vhost.d:
  html: