name: accel-ppp

services:
  sstp:
    build: ./sstp
    volumes:
      - ./accel-ppp.conf:/etc/accel-ppp.conf:ro
      - ./chap-secrets:/etc/ppp/chap-secrets:ro
      - ./cert.pem:/etc/cert.pem:ro
      - ./privkey.pem:/etc/privkey.pem:ro
      - ./ca.pem:/etc/ca.pem:ro
    expose:
      - "443/tcp"
    devices:
      - "/dev/ppp:/dev/ppp:rwm"
    environment:
      VIRTUAL_HOST: "api.bearns.me"
      VIRTUAL_PROTO: "https"
      VIRTUAL_PORT: 443
    cap_add:
      - NET_ADMIN
    networks:
      proxy-tier:
        ipv6_address: "fc00:b10c:3::ffff"
      radius-net:
        ipv6_address: "fc00:b10c:4::ffff"
  radius:
    build: ./radius
    networks:
      radius-net:
        ipv6_address: "fc00:b10c:4::eeee"

  ldap:
    build: ./ldap
    volumes:
      - ldap:/var/lib/ldap
      - ldap-cfg:/etc/ldap/slapd.d
    networks:
      radius-net:

  stream:
    build: ./nginx-stream
    volumes:
      - ./ca.pem:/etc/nginx/certs/chain.pem:ro
      - ./cert.pem:/etc/nginx/certs/api.bearns.me/fullchain.pem:ro
      - ./privkey.pem:/etc/nginx/certs/api.bearns.me/key.pem:ro
    expose:
      - "443/tcp"
    ports:
      - "443:443/tcp"
    environment:
      SNI_NAME: "api.bearns.me"
    networks:
      - proxy-tier

  proxy:
    build: ./proxy
    volumes:
      - ./cert.pem:/etc/nginx/certs/cert.pem:ro
      - ./privkey.pem:/etc/nginx/certs/privkey.pem:ro
    expose:
      - "443/tcp"
    networks:
      - proxy-tier

networks:
  proxy-tier:
    enable_ipv6: true
    ipam:
      config:
        - subnet: fc00:b10c:3::/64
  radius-net:
    enable_ipv6: true
    ipam:
      config:
        - subnet: fc00:b10c:4::/64

volumes:
  certs:
  vhost.d:
  html:
  ldap:
  ldap-cfg: