docker-compose.caddy.yml

version: '3.8'

services:
  appwrite:
    image: appwrite/appwrite:1.5.4
    tty: true
    stdin_open: true
    depends_on:
      - mariadb
      - redis
    networks:
      - caddy-public
      - appwrite
    deploy:
      mode: global
      restart_policy:
        condition: on-failure
      labels:
        caddy_1: ${REVERSE_PROXY_MAIN_DOMAINS}
        caddy_1.encode: zstd gzip
        caddy_1.reverse_proxy: "{{upstreams 80}}"
        caddy_1.reverse_proxy.header_up: "Host {host}"
        caddy_2: ${REVERSE_PROXY_FUNCTION_DOMAINS}
        caddy_2.encode: zstd gzip
        caddy_2.reverse_proxy: "{{upstreams http 80}}"
        caddy_2.reverse_proxy.header_up: "Host {host}"
    volumes:
      - appwrite-uploads:/storage/uploads:rw
      - appwrite-cache:/storage/cache:rw
      - appwrite-config:/storage/config:rw
      - appwrite-certificates:/storage/certificates:rw
      - appwrite-functions:/storage/functions:rw
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_LOCALE: ${_APP_LOCALE}
      _APP_CONSOLE_WHITELIST_ROOT: ${_APP_CONSOLE_WHITELIST_ROOT}
      _APP_CONSOLE_WHITELIST_EMAILS: ${_APP_CONSOLE_WHITELIST_EMAILS}
      _APP_CONSOLE_WHITELIST_IPS: ${_APP_CONSOLE_WHITELIST_IPS}
      _APP_CONSOLE_HOSTNAMES: ${_APP_CONSOLE_HOSTNAMES}
      _APP_SYSTEM_EMAIL_NAME: ${_APP_SYSTEM_EMAIL_NAME}
      _APP_SYSTEM_EMAIL_ADDRESS: ${_APP_SYSTEM_EMAIL_ADDRESS}
      _APP_SYSTEM_SECURITY_EMAIL_ADDRESS: ${_APP_SYSTEM_SECURITY_EMAIL_ADDRESS}
      _APP_SYSTEM_RESPONSE_FORMAT: ${_APP_SYSTEM_RESPONSE_FORMAT}
      _APP_OPTIONS_ABUSE: ${_APP_OPTIONS_ABUSE}
      _APP_OPTIONS_ROUTER_PROTECTION: ${_APP_OPTIONS_ROUTER_PROTECTION}
      _APP_OPTIONS_FORCE_HTTPS: ${_APP_OPTIONS_FORCE_HTTPS}
      _APP_OPTIONS_FUNCTIONS_FORCE_HTTPS: ${_APP_OPTIONS_FUNCTIONS_FORCE_HTTPS}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_DOMAIN: ${_APP_DOMAIN}
      _APP_DOMAIN_TARGET: ${_APP_DOMAIN_TARGET}
      _APP_DOMAIN_FUNCTIONS: ${_APP_DOMAIN_FUNCTIONS}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_SMTP_HOST: ${_APP_SMTP_HOST}
      _APP_SMTP_PORT: ${_APP_SMTP_PORT}
      _APP_SMTP_SECURE: ${_APP_SMTP_SECURE}
      _APP_SMTP_USERNAME: ${_APP_SMTP_USERNAME}
      _APP_SMTP_PASSWORD: ${_APP_SMTP_PASSWORD}
      _APP_USAGE_STATS: ${_APP_USAGE_STATS}
      _APP_STORAGE_LIMIT: ${_APP_STORAGE_LIMIT}
      _APP_STORAGE_PREVIEW_LIMIT: ${_APP_STORAGE_PREVIEW_LIMIT}
      _APP_STORAGE_ANTIVIRUS: ${_APP_STORAGE_ANTIVIRUS}
      _APP_STORAGE_ANTIVIRUS_HOST: ${_APP_STORAGE_ANTIVIRUS_HOST}
      _APP_STORAGE_ANTIVIRUS_PORT: ${_APP_STORAGE_ANTIVIRUS_PORT}
      _APP_STORAGE_DEVICE: ${_APP_STORAGE_DEVICE}
      _APP_STORAGE_S3_ACCESS_KEY: ${_APP_STORAGE_S3_ACCESS_KEY}
      _APP_STORAGE_S3_SECRET: ${_APP_STORAGE_S3_SECRET}
      _APP_STORAGE_S3_REGION: ${_APP_STORAGE_S3_REGION}
      _APP_STORAGE_S3_BUCKET: ${_APP_STORAGE_S3_BUCKET}
      _APP_STORAGE_DO_SPACES_ACCESS_KEY: ${_APP_STORAGE_DO_SPACES_ACCESS_KEY}
      _APP_STORAGE_DO_SPACES_SECRET: ${_APP_STORAGE_DO_SPACES_SECRET}
      _APP_STORAGE_DO_SPACES_REGION: ${_APP_STORAGE_DO_SPACES_REGION}
      _APP_STORAGE_DO_SPACES_BUCKET: ${_APP_STORAGE_DO_SPACES_BUCKET}
      _APP_STORAGE_BACKBLAZE_ACCESS_KEY: ${_APP_STORAGE_BACKBLAZE_ACCESS_KEY}
      _APP_STORAGE_BACKBLAZE_SECRET: ${_APP_STORAGE_BACKBLAZE_SECRET}
      _APP_STORAGE_BACKBLAZE_REGION: ${_APP_STORAGE_BACKBLAZE_REGION}
      _APP_STORAGE_BACKBLAZE_BUCKET: ${_APP_STORAGE_BACKBLAZE_BUCKET}
      _APP_STORAGE_LINODE_ACCESS_KEY: ${_APP_STORAGE_LINODE_ACCESS_KEY}
      _APP_STORAGE_LINODE_SECRET: ${_APP_STORAGE_LINODE_SECRET}
      _APP_STORAGE_LINODE_REGION: ${_APP_STORAGE_LINODE_REGION}
      _APP_STORAGE_LINODE_BUCKET: ${_APP_STORAGE_LINODE_BUCKET}
      _APP_STORAGE_WASABI_ACCESS_KEY: ${_APP_STORAGE_WASABI_ACCESS_KEY}
      _APP_STORAGE_WASABI_SECRET: ${_APP_STORAGE_WASABI_SECRET}
      _APP_STORAGE_WASABI_REGION: ${_APP_STORAGE_WASABI_REGION}
      _APP_STORAGE_WASABI_BUCKET: ${_APP_STORAGE_WASABI_BUCKET}
      _APP_FUNCTIONS_SIZE_LIMIT: ${_APP_FUNCTIONS_SIZE_LIMIT}
      _APP_FUNCTIONS_TIMEOUT: ${_APP_FUNCTIONS_TIMEOUT}
      _APP_FUNCTIONS_BUILD_TIMEOUT: ${_APP_FUNCTIONS_BUILD_TIMEOUT}
      _APP_FUNCTIONS_CPUS: ${_APP_FUNCTIONS_CPUS}
      _APP_FUNCTIONS_MEMORY: ${_APP_FUNCTIONS_MEMORY}
      _APP_FUNCTIONS_RUNTIMES: ${_APP_FUNCTIONS_RUNTIMES}
      _APP_EXECUTOR_SECRET: ${_APP_EXECUTOR_SECRET}
      _APP_EXECUTOR_HOST: ${_APP_EXECUTOR_HOST}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}
      _APP_MAINTENANCE_INTERVAL: ${_APP_MAINTENANCE_INTERVAL}
      _APP_MAINTENANCE_DELAY: ${_APP_MAINTENANCE_DELAY}
      _APP_MAINTENANCE_RETENTION_EXECUTION: ${_APP_MAINTENANCE_RETENTION_EXECUTION}
      _APP_MAINTENANCE_RETENTION_CACHE: ${_APP_MAINTENANCE_RETENTION_CACHE}
      _APP_MAINTENANCE_RETENTION_ABUSE: ${_APP_MAINTENANCE_RETENTION_ABUSE}
      _APP_MAINTENANCE_RETENTION_AUDIT: ${_APP_MAINTENANCE_RETENTION_AUDIT}
      _APP_MAINTENANCE_RETENTION_USAGE_HOURLY: ${_APP_MAINTENANCE_RETENTION_USAGE_HOURLY}
      _APP_MAINTENANCE_RETENTION_SCHEDULES: ${_APP_MAINTENANCE_RETENTION_SCHEDULES}
      _APP_SMS_PROVIDER: ${_APP_SMS_PROVIDER}
      _APP_SMS_FROM: ${_APP_SMS_FROM}
      _APP_GRAPHQL_MAX_BATCH_SIZE: ${_APP_GRAPHQL_MAX_BATCH_SIZE}
      _APP_GRAPHQL_MAX_COMPLEXITY: ${_APP_GRAPHQL_MAX_COMPLEXITY}
      _APP_GRAPHQL_MAX_DEPTH: ${_APP_GRAPHQL_MAX_DEPTH}
      _APP_VCS_GITHUB_APP_NAME: ${_APP_VCS_GITHUB_APP_NAME}
      _APP_VCS_GITHUB_PRIVATE_KEY: ${_APP_VCS_GITHUB_PRIVATE_KEY}
      _APP_VCS_GITHUB_APP_ID: ${_APP_VCS_GITHUB_APP_ID}
      _APP_VCS_GITHUB_WEBHOOK_SECRET: ${_APP_VCS_GITHUB_WEBHOOK_SECRET}
      _APP_VCS_GITHUB_CLIENT_SECRET: ${_APP_VCS_GITHUB_CLIENT_SECRET}
      _APP_VCS_GITHUB_CLIENT_ID: ${_APP_VCS_GITHUB_CLIENT_ID}
      _APP_MIGRATIONS_FIREBASE_CLIENT_ID: ${_APP_MIGRATIONS_FIREBASE_CLIENT_ID}
      _APP_MIGRATIONS_FIREBASE_CLIENT_SECRET: ${_APP_MIGRATIONS_FIREBASE_CLIENT_SECRET}
      _APP_ASSISTANT_OPENAI_API_KEY: ${_APP_ASSISTANT_OPENAI_API_KEY}

  appwrite-realtime:
    image: appwrite/appwrite:1.5.4
    entrypoint: realtime
    depends_on:
      - mariadb
      - redis
    networks:
      - caddy-public
      - appwrite
    deploy:
      mode: global
      restart_policy:
        condition: on-failure
      labels:
        caddy: ${REVERSE_PROXY_DOMAINS}
        caddy.handle: "/v1/realtime*"
        caddy.handle.@ws.0_header: Connection *Upgrade*
        caddy.handle.@ws.1_header: Upgrade websocket
        caddy.handle.reverse_proxy: "@ws {{upstreams 80}}"
        caddy.handle.reverse_proxy.header_up: "Host {host}"
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPTIONS_ABUSE: ${_APP_OPTIONS_ABUSE}
      _APP_OPTIONS_ROUTER_PROTECTION: ${_APP_OPTIONS_ROUTER_PROTECTION}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_USAGE_STATS: ${_APP_USAGE_STATS}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}

  appwrite-worker-audits:
    image: appwrite/appwrite:1.5.4
    entrypoint: worker-audits
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure
    networks:
      - appwrite
    depends_on:
      - mariadb
      - redis
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}

  appwrite-worker-webhooks:
    image: appwrite/appwrite:1.5.4
    entrypoint: worker-webhooks
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure
    networks:
      - appwrite
    depends_on:
      - mariadb
      - redis
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_SYSTEM_SECURITY_EMAIL_ADDRESS: ${_APP_SYSTEM_SECURITY_EMAIL_ADDRESS}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}

  appwrite-worker-deletes:
    image: appwrite/appwrite:1.5.4
    entrypoint: worker-deletes
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure
    networks:
      - appwrite
    depends_on:
      - mariadb
      - redis
    volumes:
      - appwrite-uploads:/storage/uploads:rw
      - appwrite-cache:/storage/cache:rw
      - appwrite-functions:/storage/functions:rw
      - appwrite-builds:/storage/builds:rw
      - appwrite-certificates:/storage/certificates:rw
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_STORAGE_DEVICE: ${_APP_STORAGE_DEVICE}
      _APP_STORAGE_S3_ACCESS_KEY: ${_APP_STORAGE_S3_ACCESS_KEY}
      _APP_STORAGE_S3_SECRET: ${_APP_STORAGE_S3_SECRET}
      _APP_STORAGE_S3_REGION: ${_APP_STORAGE_S3_REGION}
      _APP_STORAGE_S3_BUCKET: ${_APP_STORAGE_S3_BUCKET}
      _APP_STORAGE_DO_SPACES_ACCESS_KEY: ${_APP_STORAGE_DO_SPACES_ACCESS_KEY}
      _APP_STORAGE_DO_SPACES_SECRET: ${_APP_STORAGE_DO_SPACES_SECRET}
      _APP_STORAGE_DO_SPACES_REGION: ${_APP_STORAGE_DO_SPACES_REGION}
      _APP_STORAGE_DO_SPACES_BUCKET: ${_APP_STORAGE_DO_SPACES_BUCKET}
      _APP_STORAGE_BACKBLAZE_ACCESS_KEY: ${_APP_STORAGE_BACKBLAZE_ACCESS_KEY}
      _APP_STORAGE_BACKBLAZE_SECRET: ${_APP_STORAGE_BACKBLAZE_SECRET}
      _APP_STORAGE_BACKBLAZE_REGION: ${_APP_STORAGE_BACKBLAZE_REGION}
      _APP_STORAGE_BACKBLAZE_BUCKET: ${_APP_STORAGE_BACKBLAZE_BUCKET}
      _APP_STORAGE_LINODE_ACCESS_KEY: ${_APP_STORAGE_LINODE_ACCESS_KEY}
      _APP_STORAGE_LINODE_SECRET: ${_APP_STORAGE_LINODE_SECRET}
      _APP_STORAGE_LINODE_REGION: ${_APP_STORAGE_LINODE_REGION}
      _APP_STORAGE_LINODE_BUCKET: ${_APP_STORAGE_LINODE_BUCKET}
      _APP_STORAGE_WASABI_ACCESS_KEY: ${_APP_STORAGE_WASABI_ACCESS_KEY}
      _APP_STORAGE_WASABI_SECRET: ${_APP_STORAGE_WASABI_SECRET}
      _APP_STORAGE_WASABI_REGION: ${_APP_STORAGE_WASABI_REGION}
      _APP_STORAGE_WASABI_BUCKET: ${_APP_STORAGE_WASABI_BUCKET}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}
      _APP_EXECUTOR_SECRET: ${_APP_EXECUTOR_SECRET}
      _APP_EXECUTOR_HOST: ${_APP_EXECUTOR_HOST}

  appwrite-worker-databases:
    image: appwrite/appwrite:1.5.4
    entrypoint: worker-databases
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure
    networks:
      - appwrite
    depends_on:
      - mariadb
      - redis
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}

  appwrite-worker-builds:
    image: appwrite/appwrite:1.5.4
    entrypoint: worker-builds
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure
    networks:
      - appwrite
    depends_on:
      - mariadb
      - redis
    volumes:
      - appwrite-functions:/storage/functions:rw
      - appwrite-builds:/storage/builds:rw
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_EXECUTOR_SECRET: ${_APP_EXECUTOR_SECRET}
      _APP_EXECUTOR_HOST: ${_APP_EXECUTOR_HOST}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}
      _APP_VCS_GITHUB_APP_NAME: ${_APP_VCS_GITHUB_APP_NAME}
      _APP_VCS_GITHUB_PRIVATE_KEY: ${_APP_VCS_GITHUB_PRIVATE_KEY}
      _APP_VCS_GITHUB_APP_ID: ${_APP_VCS_GITHUB_APP_ID}
      _APP_FUNCTIONS_TIMEOUT: ${_APP_FUNCTIONS_TIMEOUT}
      _APP_FUNCTIONS_BUILD_TIMEOUT: ${_APP_FUNCTIONS_BUILD_TIMEOUT}
      _APP_FUNCTIONS_CPUS: ${_APP_FUNCTIONS_CPUS}
      _APP_FUNCTIONS_MEMORY: ${_APP_FUNCTIONS_MEMORY}
      _APP_FUNCTIONS_SIZE_LIMIT: ${_APP_FUNCTIONS_SIZE_LIMIT}
      _APP_OPTIONS_FORCE_HTTPS: ${_APP_OPTIONS_FORCE_HTTPS}
      _APP_OPTIONS_FUNCTIONS_FORCE_HTTPS: ${_APP_OPTIONS_FUNCTIONS_FORCE_HTTPS}
      _APP_DOMAIN: ${_APP_DOMAIN}
      _APP_STORAGE_DEVICE: ${_APP_STORAGE_DEVICE}
      _APP_STORAGE_S3_ACCESS_KEY: ${_APP_STORAGE_S3_ACCESS_KEY}
      _APP_STORAGE_S3_SECRET: ${_APP_STORAGE_S3_SECRET}
      _APP_STORAGE_S3_REGION: ${_APP_STORAGE_S3_REGION}
      _APP_STORAGE_S3_BUCKET: ${_APP_STORAGE_S3_BUCKET}
      _APP_STORAGE_DO_SPACES_ACCESS_KEY: ${_APP_STORAGE_DO_SPACES_ACCESS_KEY}
      _APP_STORAGE_DO_SPACES_SECRET: ${_APP_STORAGE_DO_SPACES_SECRET}
      _APP_STORAGE_DO_SPACES_REGION: ${_APP_STORAGE_DO_SPACES_REGION}
      _APP_STORAGE_DO_SPACES_BUCKET: ${_APP_STORAGE_DO_SPACES_BUCKET}
      _APP_STORAGE_BACKBLAZE_ACCESS_KEY: ${_APP_STORAGE_BACKBLAZE_ACCESS_KEY}
      _APP_STORAGE_BACKBLAZE_SECRET: ${_APP_STORAGE_BACKBLAZE_SECRET}
      _APP_STORAGE_BACKBLAZE_REGION: ${_APP_STORAGE_BACKBLAZE_REGION}
      _APP_STORAGE_BACKBLAZE_BUCKET: ${_APP_STORAGE_BACKBLAZE_BUCKET}
      _APP_STORAGE_LINODE_ACCESS_KEY: ${_APP_STORAGE_LINODE_ACCESS_KEY}
      _APP_STORAGE_LINODE_SECRET: ${_APP_STORAGE_LINODE_SECRET}
      _APP_STORAGE_LINODE_REGION: ${_APP_STORAGE_LINODE_REGION}
      _APP_STORAGE_LINODE_BUCKET: ${_APP_STORAGE_LINODE_BUCKET}
      _APP_STORAGE_WASABI_ACCESS_KEY: ${_APP_STORAGE_WASABI_ACCESS_KEY}
      _APP_STORAGE_WASABI_SECRET: ${_APP_STORAGE_WASABI_SECRET}
      _APP_STORAGE_WASABI_REGION: ${_APP_STORAGE_WASABI_REGION}
      _APP_STORAGE_WASABI_BUCKET: ${_APP_STORAGE_WASABI_BUCKET}

  appwrite-worker-certificates:
    image: appwrite/appwrite:1.5.4
    entrypoint: worker-certificates
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure
    networks:
      - appwrite
    depends_on:
      - mariadb
      - redis
    volumes:
      - appwrite-config:/storage/config:rw
      - appwrite-certificates:/storage/certificates:rw
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_DOMAIN: ${_APP_DOMAIN}
      _APP_DOMAIN_TARGET: ${_APP_DOMAIN_TARGET}
      _APP_DOMAIN_FUNCTIONS: ${_APP_DOMAIN_FUNCTIONS}
      _APP_SYSTEM_SECURITY_EMAIL_ADDRESS: ${_APP_SYSTEM_SECURITY_EMAIL_ADDRESS}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}

  appwrite-worker-functions:
    image: appwrite/appwrite:1.5.4
    entrypoint: worker-functions
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - ${NODE_PLACEMENT}
      restart_policy:
        condition: on-failure
    networks:
      - appwrite
    depends_on:
      - mariadb
      - redis
      - openruntimes-executor
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_FUNCTIONS_TIMEOUT: ${_APP_FUNCTIONS_TIMEOUT}
      _APP_FUNCTIONS_BUILD_TIMEOUT: ${_APP_FUNCTIONS_BUILD_TIMEOUT}
      _APP_FUNCTIONS_CPUS: ${_APP_FUNCTIONS_CPUS}
      _APP_FUNCTIONS_MEMORY: ${_APP_FUNCTIONS_MEMORY}
      _APP_EXECUTOR_SECRET: ${_APP_EXECUTOR_SECRET}
      _APP_EXECUTOR_HOST: ${_APP_EXECUTOR_HOST}
      _APP_USAGE_STATS: ${_APP_USAGE_STATS}
      _APP_DOCKER_HUB_USERNAME: ${_APP_DOCKER_HUB_USERNAME}
      _APP_DOCKER_HUB_PASSWORD: ${_APP_DOCKER_HUB_PASSWORD}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}

  appwrite-worker-mails:
    image: appwrite/appwrite:1.5.4
    entrypoint: worker-mails
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure
    networks:
      - appwrite
    depends_on:
      - redis
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_SYSTEM_EMAIL_NAME: ${_APP_SYSTEM_EMAIL_NAME}
      _APP_SYSTEM_EMAIL_ADDRESS: ${_APP_SYSTEM_EMAIL_ADDRESS}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_SMTP_HOST: ${_APP_SMTP_HOST}
      _APP_SMTP_PORT: ${_APP_SMTP_PORT}
      _APP_SMTP_SECURE: ${_APP_SMTP_SECURE}
      _APP_SMTP_USERNAME: ${_APP_SMTP_USERNAME}
      _APP_SMTP_PASSWORD: ${_APP_SMTP_PASSWORD}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}

  appwrite-worker-messaging:
    image: appwrite/appwrite:1.5.4
    entrypoint: worker-messaging
    networks:
      - appwrite
    depends_on:
      - redis
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}
      _APP_SMS_FROM: ${_APP_SMS_FROM}
      _APP_SMS_PROVIDER: ${_APP_SMS_PROVIDER}

  appwrite-worker-migrations:
    image: appwrite/appwrite:1.5.4
    entrypoint: worker-migrations
    networks:
      - appwrite
    depends_on:
      - mariadb
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_DOMAIN: ${_APP_DOMAIN}
      _APP_DOMAIN_TARGET: ${_APP_DOMAIN_TARGET}
      _APP_SYSTEM_SECURITY_EMAIL_ADDRESS: ${_APP_SYSTEM_SECURITY_EMAIL_ADDRESS}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}
      _APP_MIGRATIONS_FIREBASE_CLIENT_ID: ${_APP_MIGRATIONS_FIREBASE_CLIENT_ID}
      _APP_MIGRATIONS_FIREBASE_CLIENT_SECRET: ${_APP_MIGRATIONS_FIREBASE_CLIENT_SECRET}

  appwrite-maintenance:
    image: appwrite/appwrite:1.5.4
    entrypoint: maintenance
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure
    networks:
      - appwrite
    depends_on:
      - redis
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_DOMAIN: ${_APP_DOMAIN}
      _APP_DOMAIN_TARGET: ${_APP_DOMAIN_TARGET}
      _APP_DOMAIN_FUNCTIONS: ${_APP_DOMAIN_FUNCTIONS}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_MAINTENANCE_INTERVAL: ${_APP_MAINTENANCE_INTERVAL}
      _APP_MAINTENANCE_RETENTION_EXECUTION: ${_APP_MAINTENANCE_RETENTION_EXECUTION}
      _APP_MAINTENANCE_RETENTION_CACHE: ${_APP_MAINTENANCE_RETENTION_CACHE}
      _APP_MAINTENANCE_RETENTION_ABUSE: ${_APP_MAINTENANCE_RETENTION_ABUSE}
      _APP_MAINTENANCE_RETENTION_AUDIT: ${_APP_MAINTENANCE_RETENTION_AUDIT}
      _APP_MAINTENANCE_RETENTION_USAGE_HOURLY: ${_APP_MAINTENANCE_RETENTION_USAGE_HOURLY}
      _APP_MAINTENANCE_RETENTION_SCHEDULES: ${_APP_MAINTENANCE_RETENTION_SCHEDULES}

  appwrite-worker-usage:
    image: appwrite/appwrite:1.5.4
    entrypoint: usage
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure
    networks:
      - appwrite
    depends_on:
      - mariadb
      - redis
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_USAGE_STATS: ${_APP_USAGE_STATS}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}
      _APP_USAGE_AGGREGATION_INTERVAL: ${_APP_USAGE_AGGREGATION_INTERVAL}

  appwrite-worker-usage-dump:
    image: appwrite/appwrite:1.5.4
    entrypoint: worker-usage-dump
    networks:
      - appwrite
    depends_on:
      - mariadb
      - redis
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_USAGE_STATS: ${_APP_USAGE_STATS}
      _APP_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      _APP_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}
      _APP_USAGE_AGGREGATION_INTERVAL: ${_APP_USAGE_AGGREGATION_INTERVAL}

  appwrite-scheduler-functions:
    image: appwrite/appwrite:1.5.4
    entrypoint: schedule-functions
    deploy:
      mode: replicated
      replicas: 1
      placement:
        max_replicas_per_node: 1
      restart_policy:
        condition: on-failure
    networks:
      - appwrite
    depends_on:
      - mariadb
      - redis
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}

  appwrite-scheduler-messages:
    image: appwrite/appwrite:1.5.4
    entrypoint: schedule-messages
    deploy:
      mode: replicated
      replicas: 1
      placement:
        max_replicas_per_node: 1
      restart_policy:
        condition: on-failure
    networks:
      - appwrite
    depends_on:
      - mariadb
      - redis
    environment:
      _APP_ENV: ${_APP_ENV}
      _APP_WORKER_PER_CORE: ${_APP_WORKER_PER_CORE}
      _APP_OPENSSL_KEY_V1: ${_APP_OPENSSL_KEY_V1}
      _APP_REDIS_HOST: ${_APP_REDIS_HOST}
      _APP_REDIS_PORT: ${_APP_REDIS_PORT}
      _APP_REDIS_USER: ${_APP_REDIS_USER}
      _APP_REDIS_PASS: ${_APP_REDIS_PASS}
      _APP_DB_HOST: ${_APP_DB_HOST}
      _APP_DB_PORT: ${_APP_DB_PORT}
      _APP_DB_SCHEMA: ${_APP_DB_SCHEMA}
      _APP_DB_USER: ${_APP_DB_USER}
      _APP_DB_PASS: ${_APP_DB_PASS}

  appwrite-assistant:
    image: appwrite/assistant:0.4.0
    networks:
      - appwrite
    environment:
      _APP_ASSISTANT_OPENAI_API_KEY: ${_APP_ASSISTANT_OPENAI_API_KEY}

  openruntimes-executor:
    hostname: appwrite-executor
    stop_signal: SIGINT
    image: openruntimes/executor:0.4.9
    networks:
      - appwrite
      - runtimes
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - appwrite-builds:/storage/builds:rw
      - appwrite-functions:/storage/functions:rw
      - /tmp:/tmp:rw
    environment:
      OPR_EXECUTOR_INACTIVE_TRESHOLD: ${_APP_FUNCTIONS_INACTIVE_THRESHOLD}
      OPR_EXECUTOR_MAINTENANCE_INTERVAL: ${_APP_FUNCTIONS_MAINTENANCE_INTERVAL}
      OPR_EXECUTOR_NETWORK: ${_APP_FUNCTIONS_RUNTIMES_NETWORK}
      OPR_EXECUTOR_DOCKER_HUB_USERNAME: ${_APP_DOCKER_HUB_USERNAME}
      OPR_EXECUTOR_DOCKER_HUB_PASSWORD: ${_APP_DOCKER_HUB_PASSWORD}
      OPR_EXECUTOR_ENV: ${_APP_ENV}
      OPR_EXECUTOR_RUNTIMES: ${_APP_FUNCTIONS_RUNTIMES}
      OPR_EXECUTOR_SECRET: ${_APP_EXECUTOR_SECRET}
      OPR_EXECUTOR_LOGGING_PROVIDER: ${_APP_LOGGING_PROVIDER}
      OPR_EXECUTOR_LOGGING_CONFIG: ${_APP_LOGGING_CONFIG}
      OPR_EXECUTOR_STORAGE_DEVICE: ${_APP_STORAGE_DEVICE}
      OPR_EXECUTOR_STORAGE_S3_ACCESS_KEY: ${_APP_STORAGE_S3_ACCESS_KEY}
      OPR_EXECUTOR_STORAGE_S3_SECRET: ${_APP_STORAGE_S3_SECRET}
      OPR_EXECUTOR_STORAGE_S3_REGION: ${_APP_STORAGE_S3_REGION}
      OPR_EXECUTOR_STORAGE_S3_BUCKET: ${_APP_STORAGE_S3_BUCKET}
      OPR_EXECUTOR_STORAGE_DO_SPACES_ACCESS_KEY: ${_APP_STORAGE_DO_SPACES_ACCESS_KEY}
      OPR_EXECUTOR_STORAGE_DO_SPACES_SECRET: ${_APP_STORAGE_DO_SPACES_SECRET}
      OPR_EXECUTOR_STORAGE_DO_SPACES_REGION: ${_APP_STORAGE_DO_SPACES_REGION}
      OPR_EXECUTOR_STORAGE_DO_SPACES_BUCKET: ${_APP_STORAGE_DO_SPACES_BUCKET}
      OPR_EXECUTOR_STORAGE_BACKBLAZE_ACCESS_KEY: ${_APP_STORAGE_BACKBLAZE_ACCESS_KEY}
      OPR_EXECUTOR_STORAGE_BACKBLAZE_SECRET: ${_APP_STORAGE_BACKBLAZE_SECRET}
      OPR_EXECUTOR_STORAGE_BACKBLAZE_REGION: ${_APP_STORAGE_BACKBLAZE_REGION}
      OPR_EXECUTOR_STORAGE_BACKBLAZE_BUCKET: ${_APP_STORAGE_BACKBLAZE_BUCKET}
      OPR_EXECUTOR_STORAGE_LINODE_ACCESS_KEY: ${_APP_STORAGE_LINODE_ACCESS_KEY}
      OPR_EXECUTOR_STORAGE_LINODE_SECRET: ${_APP_STORAGE_LINODE_SECRET}
      OPR_EXECUTOR_STORAGE_LINODE_REGION: ${_APP_STORAGE_LINODE_REGION}
      OPR_EXECUTOR_STORAGE_LINODE_BUCKET: ${_APP_STORAGE_LINODE_BUCKET}
      OPR_EXECUTOR_STORAGE_WASABI_ACCESS_KEY: ${_APP_STORAGE_WASABI_ACCESS_KEY}
      OPR_EXECUTOR_STORAGE_WASABI_SECRET: ${_APP_STORAGE_WASABI_SECRET}
      OPR_EXECUTOR_STORAGE_WASABI_REGION: ${_APP_STORAGE_WASABI_REGION}
      OPR_EXECUTOR_STORAGE_WASABI_BUCKET: ${_APP_STORAGE_WASABI_BUCKET}

  mariadb:
    image: mariadb:10.11 # fix issues when upgrading using: mysql_upgrade -u root -p
    networks:
      - appwrite
    volumes:
      - mariadb:/var/lib/mysql:rw
    environment:
      MYSQL_ROOT_PASSWORD: ${_APP_DB_ROOT_PASS}
      MYSQL_DATABASE: ${_APP_DB_SCHEMA}
      MYSQL_USER: ${_APP_DB_USER}
      MYSQL_PASSWORD: ${_APP_DB_PASS}
    command: 'mysqld --innodb-flush-method=fsync'
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - ${NODE_PLACEMENT}

  redis:
    image: redis:7.2.4-alpine
    command: >
      redis-server
      --maxmemory            512mb
      --maxmemory-policy     allkeys-lru
      --maxmemory-samples    5
    networks:
      - appwrite
    volumes:
      - redis:/data:rw
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - ${NODE_PLACEMENT}

networks:
  caddy-public:
    external: true
  appwrite:
    driver: overlay
    attachable: true
  runtimes:
    driver: overlay
    attachable: true

volumes:
  mariadb:
  redis:
  appwrite-cache:
  appwrite-uploads:
  appwrite-certificates:
  appwrite-functions:
  appwrite-builds:
  appwrite-config: