docker-compose.yaml

version: '3'

services:

  # To use custom SSL certificates:
  # 1. Comment out the whole certbot: section
  # 2. Create the subdirectory ./volumes/letsencrypt/live/your-domain.com/
  # 3. Copy the private key, certificate, and full certificate chain 
  # in the PEM (base64) format to that subdirectory. Use the following names:
  # cert.pem, fullchain.pem, privkey.pem
  #
  # To use plain HTTP:
  # 1. Comment out the certbot: section
  # 2. Uncomment the port 80 forwarding
  # 3. Set the environment variable in the .env file: PROTOCOL=http
  # 
  certbot:
    image: certbot/certbot:v1.4.0
    volumes:
      - ./volumes/letsencrypt:/etc/letsencrypt
    ports: 
      - 80:80
    entrypoint: "certbot certonly --non-interactive --agree-tos -m ${ADMIN_EMAIL} --standalone -d ${BASE_DOMAIN}"

  postgresql:
    image: postgres:12-alpine
    ports:
      - 5432:5432
    environment:
      POSTGRES_USER: ${SQL_USER}
      POSTGRES_PASSWORD: ${SQL_PASS}
      POSTGRES_DB: ${SQL_BASE}
    volumes: 
      - ./volumes/db:/var/lib/postgresql/data

  hmdm:
    image: headwindmdm/hmdm:0.1.7
    ports:
      # Uncomment this port forwarding if you want to use plain HTTP instead of HTTPS
      #- 80:8080
      - 443:8443
      - 31000:31000
    volumes:
      - ./volumes/work:/usr/local/tomcat/work
      - ./volumes/letsencrypt:/etc/letsencrypt
      - ./volumes/hmdm-config:/usr/local/tomcat/conf/Catalina/localhost
    environment:
      SQL_HOST: postgresql
      SQL_USER: ${SQL_USER}
      SQL_BASE: ${SQL_BASE}
      SQL_PASS: ${SQL_PASS}
      BASE_DOMAIN: ${BASE_DOMAIN}
      LOCAL_IP: ${LOCAL_IP}
      PROTOCOL: ${PROTOCOL}
      ADMIN_EMAIL: ${ADMIN_EMAIL}
      SHARED_SECRET: ${SHARED_SECRET}
      HMDM_VARIANT: ${HMDM_VARIANT}
      DOWNLOAD_CREDENTIALS: ${DOWNLOAD_CREDENTIALS}
      HMDM_URL: ${HMDM_URL}
      CLIENT_VERSION: ${CLIENT_VERSION}
      FORCE_RECONFIGURE: ${FORCE_RECONFIGURE}