From 80a7063618b7ab2ffbe3042d7deed7e61791467f Mon Sep 17 00:00:00 2001
From: Jeff Clement <jeff@erraticbits.ca>
Date: Tue, 9 Apr 2024 15:24:29 +0000
Subject: [PATCH] Add mattermost/docker-compose.yml

---
 mattermost/docker-compose.yml | 78 +++++++++++++++++++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 mattermost/docker-compose.yml

diff --git a/mattermost/docker-compose.yml b/mattermost/docker-compose.yml
new file mode 100644
index 0000000..d5d5751
--- /dev/null
+++ b/mattermost/docker-compose.yml
@@ -0,0 +1,78 @@
+services:
+  postgres:
+    networks:
+      - backend
+    image: postgres:${POSTGRES_IMAGE_TAG}
+    restart: ${RESTART_POLICY}
+    security_opt:
+      - no-new-privileges:true
+    pids_limit: 100
+    read_only: true
+    tmpfs:
+      - /tmp
+      - /var/run/postgresql
+    volumes:
+      - ${POSTGRES_DATA_PATH}:/var/lib/postgresql/data
+    environment:
+      # timezone inside container
+      - TZ
+
+      # necessary Postgres options/variables
+      - POSTGRES_USER
+      - POSTGRES_PASSWORD
+      - POSTGRES_DB
+
+  mattermost:
+    networks:
+      - backend
+    depends_on:
+      - postgres
+    image: mattermost/${MATTERMOST_IMAGE}:${MATTERMOST_IMAGE_TAG}
+    restart: ${RESTART_POLICY}
+    security_opt:
+      - no-new-privileges:true
+    pids_limit: 200
+    read_only: ${MATTERMOST_CONTAINER_READONLY}
+    tmpfs:
+      - /tmp
+    volumes:
+      - ${MATTERMOST_CONFIG_PATH}:/mattermost/config:rw
+      - ${MATTERMOST_DATA_PATH}:/mattermost/data:rw
+      - ${MATTERMOST_LOGS_PATH}:/mattermost/logs:rw
+      - ${MATTERMOST_PLUGINS_PATH}:/mattermost/plugins:rw
+      - ${MATTERMOST_CLIENT_PLUGINS_PATH}:/mattermost/client/plugins:rw
+      - ${MATTERMOST_BLEVE_INDEXES_PATH}:/mattermost/bleve-indexes:rw
+    environment:
+      - TZ
+
+      # necessary Mattermost options/variables (see env.example)
+      - MM_SQLSETTINGS_DRIVERNAME
+      - MM_SQLSETTINGS_DATASOURCE
+
+      # necessary for bleve
+      - MM_BLEVESETTINGS_INDEXDIR
+
+      # additional settings
+      - MM_SERVICESETTINGS_SITEURL
+
+      # mail
+      - MM_EMAILSETTINGS_SMTPSERVER
+      - MM_EMAILSETTINGS_SMTPPORT
+      - MM_EMAILSETTINGS_ENABLESMTPAUTH
+      - MM_EMAILSETTINGS_SMTPUSERNAME
+      - MM_EMAILSETTINGS_SMTPPASSWORD
+      - MM_EMAILSETTINGS_CONNECTIONSECURITY
+
+  tunnel:
+    image: cloudflare/cloudflared
+    command: tunnel --no-autoupdate run
+    restart: unless-stopped
+    environment:
+      TUNNEL_TOKEN: $TUNNEL_TOKEN
+    networks:
+      - backend
+    depends_on:
+      - mattermost
+
+networks:
+  backend
\ No newline at end of file