fix second batch of _dev stacks: mariadb, mealie, nocodb, openarchiver, penpot, peertube, poste, posthog, suitecrm, zammad

mariadb_dev/compose.yaml

@@ -1,19 +1,26 @@
 services:
   mariadb:
     image: ${MARIADB_IMAGE:-mariadb:latest}
-    restart: unless-stopped
-    command: >
-      --transaction-isolation=READ-COMMITTED
-      --binlog-format=ROW
-      --innodb-file-per-table=1
-      --skip-innodb-read-only-compressed
+    restart: ${MARIADB_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/mariadb:/var/lib/mysql
     environment:
       - MARIADB_DATABASE=${MARIADB_DATABASE:-mydb}
       - MARIADB_ROOT_PASSWORD=${MARIADB_ROOT_PASSWORD:-ChangeThisPassword}
       - MARIADB_USER=${MARIADB_USER:-dbuser}
       - MARIADB_PASSWORD=${MARIADB_PASSWORD:-AlsoChangeThisPassword}
-    volumes:
-      - mariadb-data:/var/lib/mysql
+    ports:
+      - "${MARIADB_PORT:-3306}:3306"
+    networks:
+      - proxy
+      - internal
+    command: >
+      --transaction-isolation=READ-COMMITTED
+      --binlog-format=ROW
+      --innodb-file-per-table=1
+      --skip-innodb-read-only-compressed
 
-volumes:
-  mariadb-data:
+networks:
+  proxy:
+    external: true
+  internal:

mariadb_dev/sample.env

@@ -1,6 +1,11 @@
-# MariaDB
+# Compose
+VOL_PATH=/data
 MARIADB_IMAGE=mariadb:latest
-MARIADB_MARIADB_DATABASE=mydb
-MARIADB_MARIADB_ROOT_PASSWORD=ChangeThisPassword0123456789ABCD
-MARIADB_MARIADB_PASSWORD=AlsoChangeThisPassword0123456789
-MARIADB_MARIADB_USER=dbuser
+MARIADB_RESTART=unless-stopped
+MARIADB_PORT=3306
+
+# MariaDB
+MARIADB_DATABASE=mydb
+MARIADB_USER=dbuser
+MARIADB_PASSWORD=AlsoChangeThisPassword
+MARIADB_ROOT_PASSWORD=ChangeThisPassword

mealie_dev/compose.yaml

@@ -1,7 +1,9 @@
 services:
   mealie:
     image: ${MEALIE_IMAGE:-hkotel/mealie:latest}
-    restart: unless-stopped
+    restart: ${MEALIE_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/mealie:/app/data
     environment:
       - BASE_URL=${MEALIE_BASE_URL:-https://mealie.domain.com}
       - DEFAULT_EMAIL=${MEALIE_DEFAULT_EMAIL:-email@domain.com}
@@ -14,5 +16,13 @@ services:
       - RECIPE_SHOW_ASSETS=${MEALIE_RECIPE_SHOW_ASSETS:-true}
       - RECIPE_SHOW_NUTRITION=${MEALIE_RECIPE_SHOW_NUTRITION:-true}
       - TZ=${TZ:-America/Vancouver}
-    volumes:
-      - ${VOL_PATH:-./data}/mealie:/app/data
+    ports:
+      - "${MEALIE_PORT:-9000}:80"
+    networks:
+      - proxy
+      - internal
+
+networks:
+  proxy:
+    external: true
+  internal:

mealie_dev/sample.env

@@ -1,10 +1,10 @@
-
-COOKBOOK=/git/docker-compose-cookbooks #HELP: cookbooks
-VOL_PATH=./data/ #HELP: volpath
-TZ=America/Vancouver
+# Compose
+VOL_PATH=/data
+MEALIE_IMAGE=hkotel/mealie:latest
+MEALIE_RESTART=unless-stopped
+MEALIE_PORT=9000
 
 # Mealie
-MEALIE_IMAGE=hkotel/mealie:latest
 MEALIE_BASE_URL=https://mealie.domain.com
 MEALIE_DEFAULT_EMAIL=email@domain.com
 MEALIE_PGID=1000
@@ -15,3 +15,4 @@ MEALIE_RECIPE_LANDSCAPE_VIEW=true
 MEALIE_RECIPE_PUBLIC=true
 MEALIE_RECIPE_SHOW_ASSETS=true
 MEALIE_RECIPE_SHOW_NUTRITION=true
+TZ=America/Vancouver

nocodb_dev/compose.yaml

@@ -1,9 +1,16 @@
 services:
-  nc:
+  nocodb:
     image: ${NOCODB_IMAGE:-nocodb/nocodb:latest}
-    restart: unless-stopped
+    restart: ${NOCODB_RESTART:-unless-stopped}
     volumes:
-      - "nocodb-data:/usr/app/data"
+      - ${VOL_PATH:-/data}/nocodb:/usr/app/data
+    ports:
+      - "${NOCODB_PORT:-8080}:8080"
+    networks:
+      - proxy
+      - internal
 
-volumes:
-  nocodb-data:
+networks:
+  proxy:
+    external: true
+  internal:

nocodb_dev/sample.env

@@ -1,5 +1,5 @@
-
-COOKBOOK=/git/docker-compose-cookbooks #HELP: cookbooks
-# nocodb
-#NOCODB_mysql2=//root_db:3306?u=noco&p=password&d=root_db
-NOCODB_IMAGE=nocodb/nocodb:latest
+# Compose
+VOL_PATH=/data
+NOCODB_IMAGE=nocodb/nocodb:latest
+NOCODB_RESTART=unless-stopped
+NOCODB_PORT=8080

openarchiver_dev/compose.yaml

@@ -1,40 +1,57 @@
 services:
-    open-archiver:
-        image: logiclabshq/open-archiver:latest
-        ports:
-            - '3000:3000' # Frontend
-        env_file:
-            - sample.env
-        volumes:
-            - ${VOL_PATH:-./data}/archiver-data:/var/data/open-archiver
-        depends_on:
-            - postgres
-            - valkey
-            - meilisearch
+  postgres:
+    image: ${POSTGRES_IMAGE:-postgres:17-alpine}
+    restart: ${OPENARCHIVER_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/openarchiver/pgdata:/var/lib/postgresql/data
+    environment:
+      - POSTGRES_DB=${POSTGRES_DB:-open_archive}
+      - POSTGRES_USER=${POSTGRES_USER:-admin}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-password}
+    networks:
+      - internal
 
-    postgres:
-        image: postgres:17-alpine
-        environment:
-            POSTGRES_DB: ${POSTGRES_DB:-open_archive}
-            POSTGRES_USER: ${POSTGRES_USER:-admin}
-            POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-password}
-        volumes:
-            - ${VOL_PATH:-./data}/pgdata:/var/lib/postgresql/data
+  valkey:
+    image: ${VALKEY_IMAGE:-valkey/valkey:8-alpine}
+    restart: ${OPENARCHIVER_RESTART:-unless-stopped}
+    command: valkey-server --requirepass ${REDIS_PASSWORD:-RedisPasswordChangeMe}
+    volumes:
+      - ${VOL_PATH:-/data}/openarchiver/valkeydata:/data
+    networks:
+      - internal
 
-    valkey:
-        image: valkey/valkey:8-alpine
-        command: valkey-server --requirepass ${REDIS_PASSWORD:-RedisPasswordChangeMe}
-        volumes:
-            - ${VOL_PATH:-./data}/valkeydata:/data
+  meilisearch:
+    image: ${MEILISEARCH_IMAGE:-getmeili/meilisearch:v1.15}
+    restart: ${OPENARCHIVER_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/openarchiver/meilidata:/meili_data
+    environment:
+      - MEILI_MASTER_KEY=${MEILI_MASTER_KEY:-aSampleMasterKey}
+    networks:
+      - internal
 
-    meilisearch:
-        image: getmeili/meilisearch:v1.15
-        environment:
-            MEILI_MASTER_KEY: ${MEILI_MASTER_KEY:-aSampleMasterKey}
-        volumes:
-            - ${VOL_PATH:-./data}/meilidata:/meili_data
-
-    tika:
-        image: apache/tika:3.2.2.0-full
+  tika:
+    image: ${TIKA_IMAGE:-apache/tika:3.2.2.0-full}
+    restart: ${OPENARCHIVER_RESTART:-unless-stopped}
+    networks:
+      - internal
 
+  open-archiver:
+    image: ${OPENARCHIVER_IMAGE:-logiclabshq/open-archiver:latest}
+    restart: ${OPENARCHIVER_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/openarchiver/archiver-data:/var/data/open-archiver
+    ports:
+      - "${OPENARCHIVER_PORT:-3000}:3000"
+    networks:
+      - proxy
+      - internal
+    depends_on:
+      - postgres
+      - valkey
+      - meilisearch
 
+networks:
+  proxy:
+    external: true
+  internal:

peertube_dev/compose.yaml

@@ -1,11 +1,30 @@
 services:
-  peertube:
-    image: chocobozzz/peertube:production-bookworm
-    ports:
-      - "9000:9000" # Local access via http://localhost:9000
+  postgres:
+    image: ${PEERTUBE_POSTGRES_IMAGE:-postgres:16-alpine}
+    restart: ${PEERTUBE_RESTART:-unless-stopped}
     volumes:
-      - ./data/peertube/data:/data # Stores raw videos
-      - ./data/peertube/config:/config # Custom configs
+      - ${VOL_PATH:-/data}/peertube/postgres:/var/lib/postgresql/data
+    environment:
+      - POSTGRES_USER=peertube
+      - POSTGRES_PASSWORD=peertube
+      - POSTGRES_DB=peertube
+    networks:
+      - internal
+
+  redis:
+    image: ${PEERTUBE_REDIS_IMAGE:-redis:7-alpine}
+    restart: ${PEERTUBE_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/peertube/redis:/data
+    networks:
+      - internal
+
+  peertube:
+    image: ${PEERTUBE_IMAGE:-chocobozzz/peertube:production-bookworm}
+    restart: ${PEERTUBE_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/peertube/data:/data
+      - ${VOL_PATH:-/data}/peertube/config:/config
     environment:
       - NODE_ENV=production
       - POSTGRES_USER=peertube
@@ -15,43 +34,29 @@ services:
       - PEERTUBE_DB_PASSWORD=peertube
       - PEERTUBE_DB_SSL=false
       - PEERTUBE_DB_HOSTNAME=postgres
-      - PEERTUBE_WEBSERVER_HOSTNAME=localhost # Use localhost for offline
+      - PEERTUBE_WEBSERVER_HOSTNAME=${PEERTUBE_HOSTNAME:-localhost}
       - PEERTUBE_WEBSERVER_PORT=9000
       - PEERTUBE_WEBSERVER_HTTPS=false
-      - PEERTUBE_SIGNUP_ENABLED=false # Disable public signups for private use
-      - PEERTUBE_TRANSCODING_ENABLED=false # Optional: Disable to keep only raw files
-      - PEERTUBE_CONTACT_FORM_ENABLED=false # Disable for offline
-      - PEERTUBE_ADMIN_EMAIL=admin@example.com # Local email, no SMTP needed
-      - PEERTUBE_ADMIN_USERNAME=admin # Changed for clarity
-      - PEERTUBE_ADMIN_PASSWORD=changeme123 # Stronger password
-      - PEERTUBE_SECRET=FpRb4xKCgNHMv9MqmxMVqcwM9HRsVLs3N9hNtkFvXJTVkmjw3gpbmnxRrjtwLVvx # pwgen -cnsB1v 64
-      - PEERTUBE_FEDERATION_ENABLED=false # Disable federation for offline
-      - PEERTUBE_TRACKER_ENABLED=false # Disable WebTorrent trackers
-      - PEERTUBE_IMPORT_ENABLED=false # Disable external imports
+      - PEERTUBE_SIGNUP_ENABLED=false
+      - PEERTUBE_TRANSCODING_ENABLED=false
+      - PEERTUBE_CONTACT_FORM_ENABLED=false
+      - PEERTUBE_ADMIN_EMAIL=${PEERTUBE_ADMIN_EMAIL:-admin@example.com}
+      - PEERTUBE_ADMIN_USERNAME=admin
+      - PEERTUBE_ADMIN_PASSWORD=${PEERTUBE_ADMIN_PASSWORD:-changeme123}
+      - PEERTUBE_SECRET=${PEERTUBE_SECRET:?must_be_set}
+      - PEERTUBE_FEDERATION_ENABLED=false
+      - PEERTUBE_TRACKER_ENABLED=false
+      - PEERTUBE_IMPORT_ENABLED=false
+    ports:
+      - "${PEERTUBE_PORT:-9000}:9000"
+    networks:
+      - proxy
+      - internal
     depends_on:
       - postgres
       - redis
-    networks:
-      - peertube-net
-
-  postgres:
-    image: postgres:16-alpine # Updated to latest stable
-    volumes:
-      - ./data/postgres:/var/lib/postgresql/data
-    environment:
-      - POSTGRES_USER=peertube
-      - POSTGRES_PASSWORD=peertube
-      - POSTGRES_DB=peertube
-    networks:
-      - peertube-net
-
-  redis:
-    image: redis:7-alpine # Updated to latest stable
-    volumes:
-      - ./data/redis:/data
-    networks:
-      - peertube-net
 
 networks:
-  peertube-net:
-    driver: bridge
+  proxy:
+    external: true
+  internal:

peertube_dev/sample.env

@@ -1 +1,14 @@
-# Nothing Here
+# Compose
+VOL_PATH=/data
+PEERTUBE_IMAGE=chocobozzz/peertube:production-bookworm
+PEERTUBE_POSTGRES_IMAGE=postgres:16-alpine
+PEERTUBE_REDIS_IMAGE=redis:7-alpine
+PEERTUBE_RESTART=unless-stopped
+PEERTUBE_PORT=9000
+
+# PeerTube
+PEERTUBE_HOSTNAME=localhost
+PEERTUBE_ADMIN_EMAIL=admin@example.com
+PEERTUBE_ADMIN_PASSWORD=changeme123
+# Generate: pwgen -cnsB1v 64
+PEERTUBE_SECRET=

penpot_dev/compose.yaml

@@ -1,272 +1,80 @@
-## Common flags:
-# demo-users
-# email-verification
-# log-emails
-# log-invitation-tokens
-# login-with-github
-# login-with-gitlab
-# login-with-google
-# login-with-ldap
-# login-with-oidc
-# login-with-password
-# prepl-server
-# registration
-# secure-session-cookies
-# smtp
-# smtp-debug
-# telemetry
-# webhooks
-##
-## You can read more about all available flags and other
-## environment variables here:
-## https://help.penpot.app/technical-guide/configuration/#advanced-configuration
-#
-# WARNING: if you're exposing Penpot to the internet, you should remove the flags
-# 'disable-secure-session-cookies' and 'disable-email-verification'
-x-flags: &penpot-flags
-  PENPOT_FLAGS: disable-email-verification enable-smtp enable-prepl-server disable-secure-session-cookies
-
-x-uri: &penpot-public-uri
-  PENPOT_PUBLIC_URI: http://localhost:9001
-
-x-body-size: &penpot-http-body-size
-  # Max body size (30MiB); Used for plain requests, should never be
-  # greater than multi-part size
-  PENPOT_HTTP_SERVER_MAX_BODY_SIZE: 31457280
-
-  # Max multipart body size (350MiB)
-  PENPOT_HTTP_SERVER_MAX_MULTIPART_BODY_SIZE: 367001600
-
-
-networks:
-  penpot:
-
-volumes:
-  penpot_postgres_v15:
-  penpot_assets:
-  # penpot_traefik:
-  # penpot_minio:
-
 services:
-  ## Traefik service declaration example. Consider using it if you are going to expose
-  ## penpot to the internet, or a different host than `localhost`.
-
-  # traefik:
-  #   image: traefik:v2.9
-  #   networks:
-  #     - penpot
-  #   command:
-  #     - "--api.insecure=true"
-  #     - "--entryPoints.web.address=:80"
-  #     - "--providers.docker=true"
-  #     - "--providers.docker.exposedbydefault=false"
-  #     - "--entryPoints.websecure.address=:443"
-  #     - "--certificatesresolvers.letsencrypt.acme.tlschallenge=true"
-  #     - "--certificatesresolvers.letsencrypt.acme.email=<EMAIL_ADDRESS>"
-  #     - "--certificatesresolvers.letsencrypt.acme.storage=/traefik/acme.json"
-  #   volumes:
-  #     - "penpot_traefik:/traefik"
-  #     - "/var/run/docker.sock:/var/run/docker.sock"
-  #   ports:
-  #     - "80:80"
-  #     - "443:443"
-
-  penpot-frontend:
-    image: "penpotapp/frontend:latest"
-    restart: always
-    ports:
-      - 9001:8080
-
+  penpot-postgres:
+    image: ${PENPOT_POSTGRES_IMAGE:-postgres:15}
+    restart: ${PENPOT_RESTART:-unless-stopped}
     volumes:
-      - penpot_assets:/opt/data/assets
-
-    depends_on:
-      - penpot-backend
-      - penpot-exporter
-
-    networks:
-      - penpot
-
-    labels:
-      - "traefik.enable=true"
-
-      ## HTTP: example of labels for the case where penpot will be exposed to the
-      ## internet with only HTTP (without HTTPS) using traefik.
-
-      # - "traefik.http.routers.penpot-http.entrypoints=web"
-      # - "traefik.http.routers.penpot-http.rule=Host(`<DOMAIN_NAME>`)"
-      # - "traefik.http.services.penpot-http.loadbalancer.server.port=80"
-
-      ## HTTPS: example of labels for the case where penpot will be exposed to the
-      ## internet with HTTPS using traefik.
-
-      # - "traefik.http.middlewares.http-redirect.redirectscheme.scheme=https"
-      # - "traefik.http.middlewares.http-redirect.redirectscheme.permanent=true"
-      # - "traefik.http.routers.penpot-http.entrypoints=web"
-      # - "traefik.http.routers.penpot-http.rule=Host(`<DOMAIN_NAME>`)"
-      # - "traefik.http.routers.penpot-http.middlewares=http-redirect"
-      # - "traefik.http.routers.penpot-https.entrypoints=websecure"
-      # - "traefik.http.routers.penpot-https.rule=Host(`<DOMAIN_NAME>`)"
-      # - "traefik.http.services.penpot-https.loadbalancer.server.port=80"
-      # - "traefik.http.routers.penpot-https.tls=true"
-      # - "traefik.http.routers.penpot-https.tls.certresolver=letsencrypt"
-
+      - ${VOL_PATH:-/data}/penpot/postgres:/var/lib/postgresql/data
     environment:
-      << : [*penpot-flags, *penpot-http-body-size]
+      - POSTGRES_DB=penpot
+      - POSTGRES_USER=penpot
+      - POSTGRES_PASSWORD=penpot
+    networks:
+      - internal
+
+  penpot-redis:
+    image: ${PENPOT_REDIS_IMAGE:-redis:7.2}
+    restart: ${PENPOT_RESTART:-unless-stopped}
+    networks:
+      - internal
+
+  penpot-mailcatch:
+    image: ${PENPOT_MAILCATCH_IMAGE:-sj26/mailcatcher:latest}
+    restart: ${PENPOT_RESTART:-unless-stopped}
+    networks:
+      - internal
 
   penpot-backend:
-    image: "penpotapp/backend:latest"
-    restart: always
-
+    image: ${PENPOT_BACKEND_IMAGE:-penpotapp/backend:latest}
+    restart: ${PENPOT_RESTART:-unless-stopped}
     volumes:
-      - penpot_assets:/opt/data/assets
-
+      - ${VOL_PATH:-/data}/penpot/assets:/opt/data/assets
+    environment:
+      - PENPOT_FLAGS=${PENPOT_FLAGS:-disable-email-verification enable-smtp enable-prepl-server disable-secure-session-cookies}
+      - PENPOT_PUBLIC_URI=${PENPOT_PUBLIC_URI:-http://localhost:9001}
+      - PENPOT_HTTP_SERVER_MAX_BODY_SIZE=${PENPOT_BODY_SIZE:-31457280}
+      - PENPOT_HTTP_SERVER_MAX_MULTIPART_BODY_SIZE=${PENPOT_MULTIPART_SIZE:-367001600}
+      - PENPOT_DATABASE_URI=postgresql://penpot-postgres/penpot
+      - PENPOT_DATABASE_USERNAME=penpot
+      - PENPOT_DATABASE_PASSWORD=penpot
+      - PENPOT_REDIS_URI=redis://penpot-redis/0
+      - PENPOT_ASSETS_STORAGE_BACKEND=assets-fs
+      - PENPOT_STORAGE_ASSETS_FS_DIRECTORY=/opt/data/assets
+      - PENPOT_SMTP_DEFAULT_FROM=${PENPOT_SMTP_FROM:-no-reply@example.com}
+      - PENPOT_SMTP_HOST=penpot-mailcatch
+      - PENPOT_SMTP_PORT=1025
+      - PENPOT_SMTP_TLS=false
+      - PENPOT_SMTP_SSL=false
+      - PENPOT_TELEMETRY_ENABLED=${PENPOT_TELEMETRY:-true}
+    networks:
+      - internal
     depends_on:
       - penpot-postgres
       - penpot-redis
 
-    networks:
-      - penpot
-
-    ## Configuration envronment variables for the backend
-    ## container.
-
-    environment:
-      << : [*penpot-flags, *penpot-public-uri, *penpot-http-body-size]
-
-      ## Penpot SECRET KEY. It serves as a master key from which other keys for subsystems
-      ## (eg http sessions, or invitations) are derived.
-      ##
-      ## If you leave it commented, all created sessions and invitations will
-      ## become invalid on container restart.
-      ##
-      ## If you going to uncomment this, we recommend to use a trully randomly generated
-      ## 512 bits base64 encoded string here.  You can generate one with:
-      ##
-      ## python3 -c "import secrets; print(secrets.token_urlsafe(64))"
-
-      # PENPOT_SECRET_KEY: my-insecure-key
-
-      ## The PREPL host. Mainly used for external programatic access to penpot backend
-      ## (example: admin). By default it will listen on `localhost` but if you are going to use
-      ## the `admin`, you will need to uncomment this and set the host to `0.0.0.0`.
-
-      # PENPOT_PREPL_HOST: 0.0.0.0
-
-      ## Database connection parameters. Don't touch them unless you are using custom
-      ## postgresql connection parameters.
-
-      PENPOT_DATABASE_URI: postgresql://penpot-postgres/penpot
-      PENPOT_DATABASE_USERNAME: penpot
-      PENPOT_DATABASE_PASSWORD: penpot
-
-      ## Redis is used for the websockets notifications. Don't touch unless the redis
-      ## container has different parameters or different name.
-
-      PENPOT_REDIS_URI: redis://penpot-redis/0
-
-      ## Default configuration for assets storage: using filesystem based with all files
-      ## stored in a docker volume.
-
-      PENPOT_ASSETS_STORAGE_BACKEND: assets-fs
-      PENPOT_STORAGE_ASSETS_FS_DIRECTORY: /opt/data/assets
-
-      ## Also can be configured to to use a S3 compatible storage
-      ## service like MiniIO. Look below for minio service setup.
-
-      # AWS_ACCESS_KEY_ID: <KEY_ID>
-      # AWS_SECRET_ACCESS_KEY: <ACCESS_KEY>
-      # PENPOT_ASSETS_STORAGE_BACKEND: assets-s3
-      # PENPOT_STORAGE_ASSETS_S3_ENDPOINT: http://penpot-minio:9000
-      # PENPOT_STORAGE_ASSETS_S3_BUCKET: <BUKET_NAME>
-
-      ## Telemetry. When enabled, a periodical process will send anonymous data about this
-      ## instance. Telemetry data will enable us to learn how the application is used,
-      ## based on real scenarios. If you want to help us, please leave it enabled. You can
-      ## audit what data we send with the code available on github.
-
-      PENPOT_TELEMETRY_ENABLED: true
-
-      ## Example SMTP/Email configuration. By default, emails are sent to the mailcatch
-      ## service, but for production usage it is recommended to setup a real SMTP
-      ## provider. Emails are used to confirm user registrations & invitations. Look below
-      ## how the mailcatch service is configured.
-
-      PENPOT_SMTP_DEFAULT_FROM: no-reply@example.com
-      PENPOT_SMTP_DEFAULT_REPLY_TO: no-reply@example.com
-      PENPOT_SMTP_HOST: penpot-mailcatch
-      PENPOT_SMTP_PORT: 1025
-      PENPOT_SMTP_USERNAME:
-      PENPOT_SMTP_PASSWORD:
-      PENPOT_SMTP_TLS: false
-      PENPOT_SMTP_SSL: false
-
   penpot-exporter:
-    image: "penpotapp/exporter:latest"
-    restart: always
-    networks:
-      - penpot
-
+    image: ${PENPOT_EXPORTER_IMAGE:-penpotapp/exporter:latest}
+    restart: ${PENPOT_RESTART:-unless-stopped}
     environment:
-      # Don't touch it; this uses an internal docker network to
-      # communicate with the frontend.
-      PENPOT_PUBLIC_URI: http://penpot-frontend:8080
-
-      ## Redis is used for the websockets notifications.
-      PENPOT_REDIS_URI: redis://penpot-redis/0
-
-  penpot-postgres:
-    image: "postgres:15"
-    restart: always
-    stop_signal: SIGINT
+      - PENPOT_PUBLIC_URI=http://penpot-frontend:8080
+      - PENPOT_REDIS_URI=redis://penpot-redis/0
+    networks:
+      - internal
 
+  penpot-frontend:
+    image: ${PENPOT_FRONTEND_IMAGE:-penpotapp/frontend:latest}
+    restart: ${PENPOT_RESTART:-unless-stopped}
     volumes:
-      - penpot_postgres_v15:/var/lib/postgresql/data
-
-    networks:
-      - penpot
-
-    environment:
-      - POSTGRES_INITDB_ARGS=--data-checksums
-      - POSTGRES_DB=penpot
-      - POSTGRES_USER=penpot
-      - POSTGRES_PASSWORD=penpot
-
-  penpot-redis:
-    image: redis:7.2
-    restart: always
-    networks:
-      - penpot
-
-  ## A mailcatch service, used as temporal SMTP server. You can access via HTTP to the
-  ## port 1080 for read all emails the penpot platform has sent. Should be only used as a
-  ## temporal solution while no real SMTP provider is configured.
-
-  penpot-mailcatch:
-    image: sj26/mailcatcher:latest
-    restart: always
-    expose:
-      - '1025'
+      - ${VOL_PATH:-/data}/penpot/assets:/opt/data/assets
     ports:
-      - "1080:1080"
+      - "${PENPOT_PORT:-9001}:8080"
     networks:
-      - penpot
+      - proxy
+      - internal
+    depends_on:
+      - penpot-backend
+      - penpot-exporter
 
-  ## Example configuration of MiniIO (S3 compatible object storage service); If you don't
-  ## have preference, then just use filesystem, this is here just for the completeness.
-
-  # minio:
-  #   image: "minio/minio:latest"
-  #   command: minio server /mnt/data --console-address ":9001"
-  #   restart: always
-  #
-  #   volumes:
-  #     - "penpot_minio:/mnt/data"
-  #
-  #   environment:
-  #     - MINIO_ROOT_USER=minioadmin
-  #     - MINIO_ROOT_PASSWORD=minioadmin
-  #
-  #   ports:
-  #     - 9000:9000
-  #     - 9001:9001
+networks:
+  proxy:
+    external: true
+  internal:

penpot_dev/sample.env

@@ -1 +1,16 @@
-# Nothing here yet
+# Compose
+VOL_PATH=/data
+PENPOT_RESTART=unless-stopped
+PENPOT_PORT=9001
+PENPOT_FRONTEND_IMAGE=penpotapp/frontend:latest
+PENPOT_BACKEND_IMAGE=penpotapp/backend:latest
+PENPOT_EXPORTER_IMAGE=penpotapp/exporter:latest
+PENPOT_POSTGRES_IMAGE=postgres:15
+PENPOT_REDIS_IMAGE=redis:7.2
+PENPOT_MAILCATCH_IMAGE=sj26/mailcatcher:latest
+
+# Penpot
+PENPOT_PUBLIC_URI=http://localhost:9001
+PENPOT_FLAGS=disable-email-verification enable-smtp enable-prepl-server disable-secure-session-cookies
+PENPOT_SMTP_FROM=no-reply@example.com
+PENPOT_TELEMETRY=true

poste_dev/compose.yaml

@@ -1,18 +1,26 @@
 services:
   poste:
-    image: analogic/poste.io
-    restart: unless-stopped
-    ports:
-      - "25:25"     # SMTP
-      - "110:110"   # POP3
-      - "143:143"   # IMAP
-      - "587:587"   # Submission (SMTP client relay)
-      - "993:993"   # IMAPS
-      - "995:995"   # POP3S
-      - "4190:4190"
+    image: ${POSTE_IMAGE:-analogic/poste.io:latest}
+    restart: ${POSTE_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/poste:/data
     environment:
       - HTTPS=ON
-      - PUBLIC_HOSTNAME=${POSTE_PUBLIC_HOSTNAME:-mail.yourdomain.com}
+      - PUBLIC_HOSTNAME=${POSTE_HOSTNAME:-mail.yourdomain.com}
       - TZ=${TZ:-America/Vancouver}
-    volumes:
-      - ${VOL_PATH}:/data
+    ports:
+      - "${POSTE_SMTP_PORT:-25}:25"
+      - "${POSTE_POP3_PORT:-110}:110"
+      - "${POSTE_IMAP_PORT:-143}:143"
+      - "${POSTE_SUBMISSION_PORT:-587}:587"
+      - "${POSTE_IMAPS_PORT:-993}:993"
+      - "${POSTE_POP3S_PORT:-995}:995"
+      - "${POSTE_SIEVE_PORT:-4190}:4190"
+    networks:
+      - proxy
+      - internal
+
+networks:
+  proxy:
+    external: true
+  internal:

poste_dev/sample.env

@@ -1,8 +1,15 @@
-# Global
-COOKBOOK=/git/docker-compose-cookbooks
-VOL_PATH=./data
-TZ=America/Vancouver
-COMPOSE_PROJECT_NAME=poste
+# Compose
+VOL_PATH=/data
+POSTE_IMAGE=analogic/poste.io:latest
+POSTE_RESTART=unless-stopped
+POSTE_SMTP_PORT=25
+POSTE_POP3_PORT=110
+POSTE_IMAP_PORT=143
+POSTE_SUBMISSION_PORT=587
+POSTE_IMAPS_PORT=993
+POSTE_POP3S_PORT=995
+POSTE_SIEVE_PORT=4190
 
 # Poste
-POSTE_PUBLIC_HOSTNAME=yourDomain.com
+POSTE_HOSTNAME=mail.yourdomain.com
+TZ=America/Vancouver

posthog_dev/compose.yaml

@@ -8,14 +8,8 @@ services:
       - POSTGRES_DB=${POSTHOG_DB_NAME:-posthog}
       - POSTGRES_USER=${POSTHOG_DB_USER:-posthog}
       - POSTGRES_PASSWORD=${POSTHOG_DB_PASSWORD:-posthog}
-      - POSTGRES_HOST_AUTH_METHOD=scram-sha-256
     networks:
       - internal
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U ${POSTHOG_DB_USER:-posthog} -d ${POSTHOG_DB_NAME:-posthog}"]
-      interval: 5s
-      timeout: 5s
-      retries: 5
 
   redis:
     image: ${POSTHOG_REDIS_IMAGE:-redis:7-alpine}
@@ -24,11 +18,6 @@ services:
       - ${VOL_PATH:-/data}/posthog/redis:/data
     networks:
       - internal
-    healthcheck:
-      test: ["CMD", "redis-cli", "ping"]
-      interval: 5s
-      timeout: 5s
-      retries: 5
 
   clickhouse:
     image: ${POSTHOG_CLICKHOUSE_IMAGE:-clickhouse/clickhouse-server:24-alpine}
@@ -67,7 +56,6 @@ services:
   posthog:
     image: ${POSTHOG_IMAGE:-posthog/posthog:latest}
     restart: ${POSTHOG_RESTART:-unless-stopped}
-    command: /compose/start
     volumes:
       - ${VOL_PATH:-/data}/posthog/data:/data
       - ${VOL_PATH:-/data}/posthog/logs:/var/log
@@ -91,6 +79,8 @@ services:
       - EMAIL_HOST_PASSWORD=${POSTHOG_EMAIL_PASSWORD:-}
       - EMAIL_PORT=${POSTHOG_EMAIL_PORT:-587}
       - EMAIL_USE_TLS=${POSTHOG_EMAIL_TLS:-true}
+    ports:
+      - "${POSTHOG_PORT:-8000}:8000"
     networks:
       - proxy
       - internal
@@ -99,11 +89,11 @@ services:
       - redis
       - clickhouse
       - kafka
+    command: /compose/start
 
   worker:
     image: ${POSTHOG_IMAGE:-posthog/posthog:latest}
     restart: ${POSTHOG_RESTART:-unless-stopped}
-    command: /compose/worker
     volumes:
       - ${VOL_PATH:-/data}/posthog/data:/data
     environment:
@@ -128,6 +118,7 @@ services:
       - clickhouse
       - kafka
       - posthog
+    command: /compose/worker
 
 networks:
   proxy:

suitecrm_dev/compose.yaml

@@ -1,21 +1,40 @@
 services:
+  mariadb:
+    image: ${MARIADB_IMAGE:-mariadb:10.11}
+    restart: ${SUITECRM_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/suitecrm/db:/var/lib/mysql
+    environment:
+      - MARIADB_DATABASE=suitecrm_db
+      - MARIADB_USER=suitecrm
+      - MARIADB_PASSWORD=${SUITECRM_DB_PASSWORD:-ChangeThisPassword}
+      - MARIADB_ROOT_PASSWORD=${MARIADB_ROOT_PASSWORD:-ChangeThisRootPassword}
+    networks:
+      - internal
 
   suitecrm:
-    image: bitnami/suitecrm:latest
+    image: ${SUITECRM_IMAGE:-bitnami/suitecrm:latest}
+    restart: ${SUITECRM_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/suitecrm/data:/bitnami/suitecrm
     environment:
       - SUITECRM_DATABASE_HOST=mariadb
       - SUITECRM_DATABASE_PORT_NUMBER=3306
       - SUITECRM_DATABASE_USER=suitecrm
-      - SUITECRM_DATABASE_PASSWORD=${SUITECRM_DB_PASSWORD}
+      - SUITECRM_DATABASE_PASSWORD=${SUITECRM_DB_PASSWORD:-ChangeThisPassword}
       - SUITECRM_DATABASE_NAME=suitecrm_db
       - ALLOW_EMPTY_PASSWORD=no
-      - SUITECRM_USERNAME=${SUITECRM_USER}
-      - SUITECRM_PASSWORD=${SUITECRM_PASS}
+      - SUITECRM_USERNAME=${SUITECRM_USER:-admin}
+      - SUITECRM_PASSWORD=${SUITECRM_PASS:-ChangeThisPassword}
     ports:
-      - "8080:8080"
+      - "${SUITECRM_PORT:-8080}:8080"
+    networks:
+      - proxy
+      - internal
     depends_on:
       - mariadb
-    volumes:
-      - ${VOL_PATH:-./data}/suitecrm_data:/bitnami/suitecrm
-    restart: unless-stopped
 
+networks:
+  proxy:
+    external: true
+  internal:

suitecrm_dev/sample.env

@@ -1,7 +1,12 @@
+# Compose
 VOL_PATH=/data
+SUITECRM_IMAGE=bitnami/suitecrm:latest
+SUITECRM_RESTART=unless-stopped
+SUITECRM_PORT=8080
+MARIADB_IMAGE=mariadb:10.11
 
 # SuiteCRM
-SUITECRM_IMAGE=bitnami/suitecrm:latest
-SUITECRM_DB_PASSWORD=ThisPasswordNeedsToChange
-SUITECRM_USER=suiteuser
-SUITECRM_PASS=sweetpassword
+SUITECRM_DB_PASSWORD=ChangeThisPassword
+SUITECRM_USER=admin
+SUITECRM_PASS=ChangeThisPassword
+MARIADB_ROOT_PASSWORD=ChangeThisRootPassword

zammad_dev/compose.yaml

@@ -3,89 +3,68 @@ services:
     image: postgres:${POSTGRES_VERSION:-17.5-alpine}
     restart: ${ZAMMAD_RESTART:-always}
     volumes:
-      - ${VOL_PATH:-./data}/postgresql:/var/lib/postgresql/data
+      - ${VOL_PATH:-/data}/zammad/postgresql:/var/lib/postgresql/data
     environment:
-      POSTGRES_DB: ${POSTGRES_DB:-zammad_production}
-      POSTGRES_USER: ${POSTGRES_USER:-zammad}
-      POSTGRES_PASSWORD: ${POSTGRES_PASS:-zammad}
+      - POSTGRES_DB=${POSTGRES_DB:-zammad_production}
+      - POSTGRES_USER=${POSTGRES_USER:-zammad}
+      - POSTGRES_PASSWORD=${POSTGRES_PASS:-zammad}
     networks:
-      - zammad
+      - internal
 
   zammad-redis:
     image: redis:${REDIS_VERSION:-7.4.5-alpine}
     restart: ${ZAMMAD_RESTART:-always}
     volumes:
-      - ${VOL_PATH:-./data}/redis:/data
+      - ${VOL_PATH:-/data}/zammad/redis:/data
     networks:
-      - zammad
+      - internal
 
   zammad-memcached:
     image: memcached:${MEMCACHE_VERSION:-1.6.39-alpine}
     restart: ${ZAMMAD_RESTART:-always}
-    command: memcached -m 256M
+    volumes:
+      - ${VOL_PATH:-/data}/zammad/memcached:/data
     networks:
-      - zammad
+      - internal
+    command: memcached -m 256M
 
   zammad-elasticsearch:
     image: elasticsearch:${ELASTICSEARCH_VERSION:-8.19.2}
     restart: ${ZAMMAD_RESTART:-always}
     volumes:
-      - ${VOL_PATH:-./data}/elasticsearch:/usr/share/elasticsearch/data
+      - ${VOL_PATH:-/data}/zammad/elasticsearch:/usr/share/elasticsearch/data
     environment:
-      discovery.type: single-node
-      xpack.security.enabled: 'false'
-      ES_JAVA_OPTS: ${ELASTICSEARCH_JAVA_OPTS:--Xms1g -Xmx1g}
+      - discovery.type=single-node
+      - xpack.security.enabled=false
+      - ES_JAVA_OPTS=${ELASTICSEARCH_JAVA_OPTS:--Xms1g -Xmx1g}
     networks:
-      - zammad
+      - internal
 
   zammad-init:
     image: ${ZAMMAD_IMAGE:-ghcr.io/zammad/zammad:latest}
     restart: on-failure
     volumes:
-      - ${VOL_PATH:-./data}/zammad/storage:/opt/zammad/storage
+      - ${VOL_PATH:-/data}/zammad/storage:/opt/zammad/storage
     environment:
-      TZ: ${TZ:-America/Vancouver}
-      MEMCACHE_SERVERS: ${MEMCACHE_SERVERS:-zammad-memcached:11211}
-      POSTGRESQL_DB: ${POSTGRES_DB:-zammad_production}
-      POSTGRESQL_HOST: ${POSTGRES_HOST:-zammad-postgresql}
-      POSTGRESQL_USER: ${POSTGRES_USER:-zammad}
-      POSTGRESQL_PASS: ${POSTGRES_PASS:-zammad}
-      POSTGRESQL_PORT: ${POSTGRES_PORT:-5432}
-      POSTGRESQL_OPTIONS: ${POSTGRESQL_OPTIONS:-?pool=50}
-      POSTGRESQL_DB_CREATE: ${POSTGRESQL_DB_CREATE:-true}
-      REDIS_URL: ${REDIS_URL:-redis://zammad-redis:6379}
-      S3_URL: ${S3_URL:-}
-      BACKUP_DIR: "${BACKUP_DIR:-/var/tmp/zammad}"
-      BACKUP_TIME: "${BACKUP_TIME:-03:00}"
-      HOLD_DAYS: "${HOLD_DAYS:-10}"
-      ELASTICSEARCH_ENABLED: ${ELASTICSEARCH_ENABLED:-true}
-      ELASTICSEARCH_SCHEMA: ${ELASTICSEARCH_SCHEMA:-http}
-      ELASTICSEARCH_HOST: ${ELASTICSEARCH_HOST:-zammad-elasticsearch}
-      ELASTICSEARCH_PORT: ${ELASTICSEARCH_PORT:-9200}
-      ELASTICSEARCH_USER: ${ELASTICSEARCH_USER:-}
-      ELASTICSEARCH_PASS: ${ELASTICSEARCH_PASS:-}
-      ELASTICSEARCH_NAMESPACE: ${ELASTICSEARCH_NAMESPACE:-zammad}
-      ELASTICSEARCH_REINDEX: ${ELASTICSEARCH_REINDEX:-}
-      AUTOWIZARD_JSON: ${AUTOWIZARD_JSON:-}
-      AUTOWIZARD_RELATIVE_PATH: ${AUTOWIZARD_RELATIVE_PATH:-}
-      ZAMMAD_HTTP_TYPE: ${ZAMMAD_HTTP_TYPE:-}
-      ZAMMAD_FQDN: ${ZAMMAD_FQDN:-}
-      ZAMMAD_WEB_CONCURRENCY: ${ZAMMAD_WEB_CONCURRENCY:-}
-      ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS: ${ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS:-}
-      ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS: ${ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS:-}
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: ${ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS:-}
-      ZAMMAD_SESSION_JOBS_CONCURRENT: ${ZAMMAD_SESSION_JOBS_CONCURRENT:-}
-      NGINX_PORT: ${NGINX_PORT:-8080}
-      NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-50M}
-      NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
-      NGINX_SERVER_SCHEME: $scheme
-      RAILS_TRUSTED_PROXIES: ${RAILS_TRUSTED_PROXIES:-"['127.0.0.1', '::1']"}
-      VIRTUAL_HOST: ${VIRTUAL_HOST:-}
-      VIRTUAL_PORT: ${VIRTUAL_PORT:-}
-      LETSENCRYPT_HOST: ${LETSENCRYPT_HOST:-}
-      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL:-}
+      - TZ=${TZ:-America/Vancouver}
+      - MEMCACHE_SERVERS=${MEMCACHE_SERVERS:-zammad-memcached:11211}
+      - POSTGRESQL_DB=${POSTGRES_DB:-zammad_production}
+      - POSTGRESQL_HOST=${POSTGRES_HOST:-zammad-postgresql}
+      - POSTGRESQL_USER=${POSTGRES_USER:-zammad}
+      - POSTGRESQL_PASS=${POSTGRES_PASS:-zammad}
+      - POSTGRESQL_PORT=${POSTGRES_PORT:-5432}
+      - POSTGRESQL_OPTIONS=${POSTGRESQL_OPTIONS:-?pool=50}
+      - POSTGRESQL_DB_CREATE=${POSTGRESQL_DB_CREATE:-true}
+      - REDIS_URL=${REDIS_URL:-redis://zammad-redis:6379}
+      - ELASTICSEARCH_ENABLED=${ELASTICSEARCH_ENABLED:-true}
+      - ELASTICSEARCH_SCHEMA=http
+      - ELASTICSEARCH_HOST=${ELASTICSEARCH_HOST:-zammad-elasticsearch}
+      - ELASTICSEARCH_PORT=${ELASTICSEARCH_PORT:-9200}
+      - NGINX_PORT=${NGINX_PORT:-8080}
+      - NGINX_SERVER_NAME=${NGINX_SERVER_NAME:-_}
+      - NGINX_SERVER_SCHEME=$scheme
     networks:
-      - zammad
+      - internal
     depends_on:
       - zammad-postgresql
       - zammad-redis
@@ -98,50 +77,26 @@ services:
     image: ${ZAMMAD_IMAGE:-ghcr.io/zammad/zammad:latest}
     restart: ${ZAMMAD_RESTART:-always}
     volumes:
-      - ${VOL_PATH:-./data}/zammad/storage:/opt/zammad/storage
+      - ${VOL_PATH:-/data}/zammad/storage:/opt/zammad/storage
     environment:
-      TZ: ${TZ:-America/Vancouver}
-      MEMCACHE_SERVERS: ${MEMCACHE_SERVERS:-zammad-memcached:11211}
-      POSTGRESQL_DB: ${POSTGRES_DB:-zammad_production}
-      POSTGRESQL_HOST: ${POSTGRES_HOST:-zammad-postgresql}
-      POSTGRESQL_USER: ${POSTGRES_USER:-zammad}
-      POSTGRESQL_PASS: ${POSTGRES_PASS:-zammad}
-      POSTGRESQL_PORT: ${POSTGRES_PORT:-5432}
-      POSTGRESQL_OPTIONS: ${POSTGRESQL_OPTIONS:-?pool=50}
-      POSTGRESQL_DB_CREATE: ${POSTGRESQL_DB_CREATE:-true}
-      REDIS_URL: ${REDIS_URL:-redis://zammad-redis:6379}
-      S3_URL: ${S3_URL:-}
-      BACKUP_DIR: "${BACKUP_DIR:-/var/tmp/zammad}"
-      BACKUP_TIME: "${BACKUP_TIME:-03:00}"
-      HOLD_DAYS: "${HOLD_DAYS:-10}"
-      ELASTICSEARCH_ENABLED: ${ELASTICSEARCH_ENABLED:-true}
-      ELASTICSEARCH_SCHEMA: ${ELASTICSEARCH_SCHEMA:-http}
-      ELASTICSEARCH_HOST: ${ELASTICSEARCH_HOST:-zammad-elasticsearch}
-      ELASTICSEARCH_PORT: ${ELASTICSEARCH_PORT:-9200}
-      ELASTICSEARCH_USER: ${ELASTICSEARCH_USER:-}
-      ELASTICSEARCH_PASS: ${ELASTICSEARCH_PASS:-}
-      ELASTICSEARCH_NAMESPACE: ${ELASTICSEARCH_NAMESPACE:-zammad}
-      ELASTICSEARCH_REINDEX: ${ELASTICSEARCH_REINDEX:-}
-      AUTOWIZARD_JSON: ${AUTOWIZARD_JSON:-}
-      AUTOWIZARD_RELATIVE_PATH: ${AUTOWIZARD_RELATIVE_PATH:-}
-      ZAMMAD_HTTP_TYPE: ${ZAMMAD_HTTP_TYPE:-}
-      ZAMMAD_FQDN: ${ZAMMAD_FQDN:-}
-      ZAMMAD_WEB_CONCURRENCY: ${ZAMMAD_WEB_CONCURRENCY:-}
-      ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS: ${ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS:-}
-      ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS: ${ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS:-}
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: ${ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS:-}
-      ZAMMAD_SESSION_JOBS_CONCURRENT: ${ZAMMAD_SESSION_JOBS_CONCURRENT:-}
-      NGINX_PORT: ${NGINX_PORT:-8080}
-      NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-50M}
-      NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
-      NGINX_SERVER_SCHEME: $scheme
-      RAILS_TRUSTED_PROXIES: ${RAILS_TRUSTED_PROXIES:-"['127.0.0.1', '::1']"}
-      VIRTUAL_HOST: ${VIRTUAL_HOST:-}
-      VIRTUAL_PORT: ${VIRTUAL_PORT:-}
-      LETSENCRYPT_HOST: ${LETSENCRYPT_HOST:-}
-      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL:-}
+      - TZ=${TZ:-America/Vancouver}
+      - MEMCACHE_SERVERS=${MEMCACHE_SERVERS:-zammad-memcached:11211}
+      - POSTGRESQL_DB=${POSTGRES_DB:-zammad_production}
+      - POSTGRESQL_HOST=${POSTGRES_HOST:-zammad-postgresql}
+      - POSTGRESQL_USER=${POSTGRES_USER:-zammad}
+      - POSTGRESQL_PASS=${POSTGRES_PASS:-zammad}
+      - POSTGRESQL_PORT=${POSTGRES_PORT:-5432}
+      - POSTGRESQL_OPTIONS=${POSTGRESQL_OPTIONS:-?pool=50}
+      - REDIS_URL=${REDIS_URL:-redis://zammad-redis:6379}
+      - ELASTICSEARCH_ENABLED=${ELASTICSEARCH_ENABLED:-true}
+      - ELASTICSEARCH_SCHEMA=http
+      - ELASTICSEARCH_HOST=${ELASTICSEARCH_HOST:-zammad-elasticsearch}
+      - ELASTICSEARCH_PORT=${ELASTICSEARCH_PORT:-9200}
+      - NGINX_PORT=${NGINX_PORT:-8080}
+      - NGINX_SERVER_NAME=${NGINX_SERVER_NAME:-_}
+      - RAILS_TRUSTED_PROXIES=${RAILS_TRUSTED_PROXIES:-"['127.0.0.1', '::1']"}
     networks:
-      - zammad
+      - internal
     depends_on:
       - zammad-postgresql
       - zammad-redis
@@ -153,50 +108,25 @@ services:
     image: ${ZAMMAD_IMAGE:-ghcr.io/zammad/zammad:latest}
     restart: ${ZAMMAD_RESTART:-always}
     volumes:
-      - ${VOL_PATH:-./data}/zammad/storage:/opt/zammad/storage
+      - ${VOL_PATH:-/data}/zammad/storage:/opt/zammad/storage
     environment:
-      TZ: ${TZ:-America/Vancouver}
-      MEMCACHE_SERVERS: ${MEMCACHE_SERVERS:-zammad-memcached:11211}
-      POSTGRESQL_DB: ${POSTGRES_DB:-zammad_production}
-      POSTGRESQL_HOST: ${POSTGRES_HOST:-zammad-postgresql}
-      POSTGRESQL_USER: ${POSTGRES_USER:-zammad}
-      POSTGRESQL_PASS: ${POSTGRES_PASS:-zammad}
-      POSTGRESQL_PORT: ${POSTGRES_PORT:-5432}
-      POSTGRESQL_OPTIONS: ${POSTGRESQL_OPTIONS:-?pool=50}
-      POSTGRESQL_DB_CREATE: ${POSTGRESQL_DB_CREATE:-true}
-      REDIS_URL: ${REDIS_URL:-redis://zammad-redis:6379}
-      S3_URL: ${S3_URL:-}
-      BACKUP_DIR: "${BACKUP_DIR:-/var/tmp/zammad}"
-      BACKUP_TIME: "${BACKUP_TIME:-03:00}"
-      HOLD_DAYS: "${HOLD_DAYS:-10}"
-      ELASTICSEARCH_ENABLED: ${ELASTICSEARCH_ENABLED:-true}
-      ELASTICSEARCH_SCHEMA: ${ELASTICSEARCH_SCHEMA:-http}
-      ELASTICSEARCH_HOST: ${ELASTICSEARCH_HOST:-zammad-elasticsearch}
-      ELASTICSEARCH_PORT: ${ELASTICSEARCH_PORT:-9200}
-      ELASTICSEARCH_USER: ${ELASTICSEARCH_USER:-}
-      ELASTICSEARCH_PASS: ${ELASTICSEARCH_PASS:-}
-      ELASTICSEARCH_NAMESPACE: ${ELASTICSEARCH_NAMESPACE:-zammad}
-      ELASTICSEARCH_REINDEX: ${ELASTICSEARCH_REINDEX:-}
-      AUTOWIZARD_JSON: ${AUTOWIZARD_JSON:-}
-      AUTOWIZARD_RELATIVE_PATH: ${AUTOWIZARD_RELATIVE_PATH:-}
-      ZAMMAD_HTTP_TYPE: ${ZAMMAD_HTTP_TYPE:-}
-      ZAMMAD_FQDN: ${ZAMMAD_FQDN:-}
-      ZAMMAD_WEB_CONCURRENCY: ${ZAMMAD_WEB_CONCURRENCY:-}
-      ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS: ${ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS:-}
-      ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS: ${ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS:-}
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: ${ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS:-}
-      ZAMMAD_SESSION_JOBS_CONCURRENT: ${ZAMMAD_SESSION_JOBS_CONCURRENT:-}
-      NGINX_PORT: ${NGINX_PORT:-8080}
-      NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-50M}
-      NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
-      NGINX_SERVER_SCHEME: $scheme
-      RAILS_TRUSTED_PROXIES: ${RAILS_TRUSTED_PROXIES:-"['127.0.0.1', '::1']"}
-      VIRTUAL_HOST: ${VIRTUAL_HOST:-}
-      VIRTUAL_PORT: ${VIRTUAL_PORT:-}
-      LETSENCRYPT_HOST: ${LETSENCRYPT_HOST:-}
-      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL:-}
+      - TZ=${TZ:-America/Vancouver}
+      - MEMCACHE_SERVERS=${MEMCACHE_SERVERS:-zammad-memcached:11211}
+      - POSTGRESQL_DB=${POSTGRES_DB:-zammad_production}
+      - POSTGRESQL_HOST=${POSTGRES_HOST:-zammad-postgresql}
+      - POSTGRESQL_USER=${POSTGRES_USER:-zammad}
+      - POSTGRESQL_PASS=${POSTGRES_PASS:-zammad}
+      - POSTGRESQL_PORT=${POSTGRES_PORT:-5432}
+      - POSTGRESQL_OPTIONS=${POSTGRESQL_OPTIONS:-?pool=50}
+      - REDIS_URL=${REDIS_URL:-redis://zammad-redis:6379}
+      - ELASTICSEARCH_ENABLED=${ELASTICSEARCH_ENABLED:-true}
+      - ELASTICSEARCH_SCHEMA=http
+      - ELASTICSEARCH_HOST=${ELASTICSEARCH_HOST:-zammad-elasticsearch}
+      - ELASTICSEARCH_PORT=${ELASTICSEARCH_PORT:-9200}
+      - NGINX_PORT=${NGINX_PORT:-8080}
+      - NGINX_SERVER_NAME=${NGINX_SERVER_NAME:-_}
     networks:
-      - zammad
+      - internal
     depends_on:
       - zammad-postgresql
       - zammad-redis
@@ -208,50 +138,25 @@ services:
     image: ${ZAMMAD_IMAGE:-ghcr.io/zammad/zammad:latest}
     restart: ${ZAMMAD_RESTART:-always}
     volumes:
-      - ${VOL_PATH:-./data}/zammad/storage:/opt/zammad/storage
+      - ${VOL_PATH:-/data}/zammad/storage:/opt/zammad/storage
     environment:
-      TZ: ${TZ:-America/Vancouver}
-      MEMCACHE_SERVERS: ${MEMCACHE_SERVERS:-zammad-memcached:11211}
-      POSTGRESQL_DB: ${POSTGRES_DB:-zammad_production}
-      POSTGRESQL_HOST: ${POSTGRES_HOST:-zammad-postgresql}
-      POSTGRESQL_USER: ${POSTGRES_USER:-zammad}
-      POSTGRESQL_PASS: ${POSTGRES_PASS:-zammad}
-      POSTGRESQL_PORT: ${POSTGRES_PORT:-5432}
-      POSTGRESQL_OPTIONS: ${POSTGRESQL_OPTIONS:-?pool=50}
-      POSTGRESQL_DB_CREATE: ${POSTGRESQL_DB_CREATE:-true}
-      REDIS_URL: ${REDIS_URL:-redis://zammad-redis:6379}
-      S3_URL: ${S3_URL:-}
-      BACKUP_DIR: "${BACKUP_DIR:-/var/tmp/zammad}"
-      BACKUP_TIME: "${BACKUP_TIME:-03:00}"
-      HOLD_DAYS: "${HOLD_DAYS:-10}"
-      ELASTICSEARCH_ENABLED: ${ELASTICSEARCH_ENABLED:-true}
-      ELASTICSEARCH_SCHEMA: ${ELASTICSEARCH_SCHEMA:-http}
-      ELASTICSEARCH_HOST: ${ELASTICSEARCH_HOST:-zammad-elasticsearch}
-      ELASTICSEARCH_PORT: ${ELASTICSEARCH_PORT:-9200}
-      ELASTICSEARCH_USER: ${ELASTICSEARCH_USER:-}
-      ELASTICSEARCH_PASS: ${ELASTICSEARCH_PASS:-}
-      ELASTICSEARCH_NAMESPACE: ${ELASTICSEARCH_NAMESPACE:-zammad}
-      ELASTICSEARCH_REINDEX: ${ELASTICSEARCH_REINDEX:-}
-      AUTOWIZARD_JSON: ${AUTOWIZARD_JSON:-}
-      AUTOWIZARD_RELATIVE_PATH: ${AUTOWIZARD_RELATIVE_PATH:-}
-      ZAMMAD_HTTP_TYPE: ${ZAMMAD_HTTP_TYPE:-}
-      ZAMMAD_FQDN: ${ZAMMAD_FQDN:-}
-      ZAMMAD_WEB_CONCURRENCY: ${ZAMMAD_WEB_CONCURRENCY:-}
-      ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS: ${ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS:-}
-      ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS: ${ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS:-}
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: ${ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS:-}
-      ZAMMAD_SESSION_JOBS_CONCURRENT: ${ZAMMAD_SESSION_JOBS_CONCURRENT:-}
-      NGINX_PORT: ${NGINX_PORT:-8080}
-      NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-50M}
-      NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
-      NGINX_SERVER_SCHEME: $scheme
-      RAILS_TRUSTED_PROXIES: ${RAILS_TRUSTED_PROXIES:-"['127.0.0.1', '::1']"}
-      VIRTUAL_HOST: ${VIRTUAL_HOST:-}
-      VIRTUAL_PORT: ${VIRTUAL_PORT:-}
-      LETSENCRYPT_HOST: ${LETSENCRYPT_HOST:-}
-      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL:-}
+      - TZ=${TZ:-America/Vancouver}
+      - MEMCACHE_SERVERS=${MEMCACHE_SERVERS:-zammad-memcached:11211}
+      - POSTGRESQL_DB=${POSTGRES_DB:-zammad_production}
+      - POSTGRESQL_HOST=${POSTGRES_HOST:-zammad-postgresql}
+      - POSTGRESQL_USER=${POSTGRES_USER:-zammad}
+      - POSTGRESQL_PASS=${POSTGRES_PASS:-zammad}
+      - POSTGRESQL_PORT=${POSTGRES_PORT:-5432}
+      - POSTGRESQL_OPTIONS=${POSTGRESQL_OPTIONS:-?pool=50}
+      - REDIS_URL=${REDIS_URL:-redis://zammad-redis:6379}
+      - ELASTICSEARCH_ENABLED=${ELASTICSEARCH_ENABLED:-true}
+      - ELASTICSEARCH_SCHEMA=http
+      - ELASTICSEARCH_HOST=${ELASTICSEARCH_HOST:-zammad-elasticsearch}
+      - ELASTICSEARCH_PORT=${ELASTICSEARCH_PORT:-9200}
+      - NGINX_PORT=${NGINX_PORT:-8080}
+      - NGINX_SERVER_NAME=${NGINX_SERVER_NAME:-_}
     networks:
-      - zammad
+      - internal
     depends_on:
       - zammad-postgresql
       - zammad-redis
@@ -263,51 +168,29 @@ services:
     image: ${ZAMMAD_IMAGE:-ghcr.io/zammad/zammad:latest}
     restart: ${ZAMMAD_RESTART:-always}
     volumes:
-      - ${VOL_PATH:-./data}/zammad/backup:${BACKUP_DIR:-/var/tmp/zammad}
-      - ${VOL_PATH:-./data}/zammad/storage:/opt/zammad/storage:ro
+      - ${VOL_PATH:-/data}/zammad/backup:/var/tmp/zammad
+      - ${VOL_PATH:-/data}/zammad/storage:/opt/zammad/storage:ro
     environment:
-      TZ: ${TZ:-America/Vancouver}
-      MEMCACHE_SERVERS: ${MEMCACHE_SERVERS:-zammad-memcached:11211}
-      POSTGRESQL_DB: ${POSTGRES_DB:-zammad_production}
-      POSTGRESQL_HOST: ${POSTGRES_HOST:-zammad-postgresql}
-      POSTGRESQL_USER: ${POSTGRES_USER:-zammad}
-      POSTGRESQL_PASS: ${POSTGRES_PASS:-zammad}
-      POSTGRESQL_PORT: ${POSTGRES_PORT:-5432}
-      POSTGRESQL_OPTIONS: ${POSTGRESQL_OPTIONS:-?pool=50}
-      POSTGRESQL_DB_CREATE: ${POSTGRESQL_DB_CREATE:-true}
-      REDIS_URL: ${REDIS_URL:-redis://zammad-redis:6379}
-      S3_URL: ${S3_URL:-}
-      BACKUP_DIR: "${BACKUP_DIR:-/var/tmp/zammad}"
-      BACKUP_TIME: "${BACKUP_TIME:-03:00}"
-      HOLD_DAYS: "${HOLD_DAYS:-10}"
-      ELASTICSEARCH_ENABLED: ${ELASTICSEARCH_ENABLED:-true}
-      ELASTICSEARCH_SCHEMA: ${ELASTICSEARCH_SCHEMA:-http}
-      ELASTICSEARCH_HOST: ${ELASTICSEARCH_HOST:-zammad-elasticsearch}
-      ELASTICSEARCH_PORT: ${ELASTICSEARCH_PORT:-9200}
-      ELASTICSEARCH_USER: ${ELASTICSEARCH_USER:-}
-      ELASTICSEARCH_PASS: ${ELASTICSEARCH_PASS:-}
-      ELASTICSEARCH_NAMESPACE: ${ELASTICSEARCH_NAMESPACE:-zammad}
-      ELASTICSEARCH_REINDEX: ${ELASTICSEARCH_REINDEX:-}
-      AUTOWIZARD_JSON: ${AUTOWIZARD_JSON:-}
-      AUTOWIZARD_RELATIVE_PATH: ${AUTOWIZARD_RELATIVE_PATH:-}
-      ZAMMAD_HTTP_TYPE: ${ZAMMAD_HTTP_TYPE:-}
-      ZAMMAD_FQDN: ${ZAMMAD_FQDN:-}
-      ZAMMAD_WEB_CONCURRENCY: ${ZAMMAD_WEB_CONCURRENCY:-}
-      ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS: ${ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS:-}
-      ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS: ${ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS:-}
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: ${ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS:-}
-      ZAMMAD_SESSION_JOBS_CONCURRENT: ${ZAMMAD_SESSION_JOBS_CONCURRENT:-}
-      NGINX_PORT: ${NGINX_PORT:-8080}
-      NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-50M}
-      NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
-      NGINX_SERVER_SCHEME: $scheme
-      RAILS_TRUSTED_PROXIES: ${RAILS_TRUSTED_PROXIES:-"['127.0.0.1', '::1']"}
-      VIRTUAL_HOST: ${VIRTUAL_HOST:-}
-      VIRTUAL_PORT: ${VIRTUAL_PORT:-}
-      LETSENCRYPT_HOST: ${LETSENCRYPT_HOST:-}
-      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL:-}
+      - TZ=${TZ:-America/Vancouver}
+      - MEMCACHE_SERVERS=${MEMCACHE_SERVERS:-zammad-memcached:11211}
+      - POSTGRESQL_DB=${POSTGRES_DB:-zammad_production}
+      - POSTGRESQL_HOST=${POSTGRES_HOST:-zammad-postgresql}
+      - POSTGRESQL_USER=${POSTGRES_USER:-zammad}
+      - POSTGRESQL_PASS=${POSTGRES_PASS:-zammad}
+      - POSTGRESQL_PORT=${POSTGRES_PORT:-5432}
+      - POSTGRESQL_OPTIONS=${POSTGRESQL_OPTIONS:-?pool=50}
+      - REDIS_URL=${REDIS_URL:-redis://zammad-redis:6379}
+      - ELASTICSEARCH_ENABLED=${ELASTICSEARCH_ENABLED:-true}
+      - ELASTICSEARCH_SCHEMA=http
+      - ELASTICSEARCH_HOST=${ELASTICSEARCH_HOST:-zammad-elasticsearch}
+      - ELASTICSEARCH_PORT=${ELASTICSEARCH_PORT:-9200}
+      - BACKUP_DIR=/var/tmp/zammad
+      - BACKUP_TIME=${BACKUP_TIME:-03:00}
+      - HOLD_DAYS=${HOLD_DAYS:-10}
+      - NGINX_PORT=${NGINX_PORT:-8080}
+      - NGINX_SERVER_NAME=${NGINX_SERVER_NAME:-_}
     networks:
-      - zammad
+      - internal
     depends_on:
       - zammad-postgresql
       - zammad-redis
@@ -320,61 +203,35 @@ services:
     image: ${ZAMMAD_IMAGE:-ghcr.io/zammad/zammad:latest}
     restart: ${ZAMMAD_RESTART:-always}
     volumes:
-      - ${VOL_PATH:-./data}/zammad/storage:/opt/zammad/storage
+      - ${VOL_PATH:-/data}/zammad/storage:/opt/zammad/storage
     environment:
-      TZ: ${TZ:-America/Vancouver}
-      MEMCACHE_SERVERS: ${MEMCACHE_SERVERS:-zammad-memcached:11211}
-      POSTGRESQL_DB: ${POSTGRES_DB:-zammad_production}
-      POSTGRESQL_HOST: ${POSTGRES_HOST:-zammad-postgresql}
-      POSTGRESQL_USER: ${POSTGRES_USER:-zammad}
-      POSTGRESQL_PASS: ${POSTGRES_PASS:-zammad}
-      POSTGRESQL_PORT: ${POSTGRES_PORT:-5432}
-      POSTGRESQL_OPTIONS: ${POSTGRESQL_OPTIONS:-?pool=50}
-      POSTGRESQL_DB_CREATE: ${POSTGRESQL_DB_CREATE:-true}
-      REDIS_URL: ${REDIS_URL:-redis://zammad-redis:6379}
-      S3_URL: ${S3_URL:-}
-      BACKUP_DIR: "${BACKUP_DIR:-/var/tmp/zammad}"
-      BACKUP_TIME: "${BACKUP_TIME:-03:00}"
-      HOLD_DAYS: "${HOLD_DAYS:-10}"
-      ELASTICSEARCH_ENABLED: ${ELASTICSEARCH_ENABLED:-true}
-      ELASTICSEARCH_SCHEMA: ${ELASTICSEARCH_SCHEMA:-http}
-      ELASTICSEARCH_HOST: ${ELASTICSEARCH_HOST:-zammad-elasticsearch}
-      ELASTICSEARCH_PORT: ${ELASTICSEARCH_PORT:-9200}
-      ELASTICSEARCH_USER: ${ELASTICSEARCH_USER:-}
-      ELASTICSEARCH_PASS: ${ELASTICSEARCH_PASS:-}
-      ELASTICSEARCH_NAMESPACE: ${ELASTICSEARCH_NAMESPACE:-zammad}
-      ELASTICSEARCH_REINDEX: ${ELASTICSEARCH_REINDEX:-}
-      AUTOWIZARD_JSON: ${AUTOWIZARD_JSON:-}
-      AUTOWIZARD_RELATIVE_PATH: ${AUTOWIZARD_RELATIVE_PATH:-}
-      ZAMMAD_HTTP_TYPE: ${ZAMMAD_HTTP_TYPE:-}
-      ZAMMAD_FQDN: ${ZAMMAD_FQDN:-}
-      ZAMMAD_WEB_CONCURRENCY: ${ZAMMAD_WEB_CONCURRENCY:-}
-      ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS: ${ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS:-}
-      ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS: ${ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS:-}
-      ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS: ${ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS:-}
-      ZAMMAD_SESSION_JOBS_CONCURRENT: ${ZAMMAD_SESSION_JOBS_CONCURRENT:-}
-      NGINX_PORT: ${NGINX_PORT:-8080}
-      NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-50M}
-      NGINX_SERVER_NAME: ${NGINX_SERVER_NAME:-_}
-      NGINX_SERVER_SCHEME: $scheme
-      RAILS_TRUSTED_PROXIES: ${RAILS_TRUSTED_PROXIES:-"['127.0.0.1', '::1']"}
-      VIRTUAL_HOST: ${VIRTUAL_HOST:-}
-      VIRTUAL_PORT: ${VIRTUAL_PORT:-}
-      LETSENCRYPT_HOST: ${LETSENCRYPT_HOST:-}
-      LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL:-}
+      - TZ=${TZ:-America/Vancouver}
+      - MEMCACHE_SERVERS=${MEMCACHE_SERVERS:-zammad-memcached:11211}
+      - POSTGRESQL_DB=${POSTGRES_DB:-zammad_production}
+      - POSTGRESQL_HOST=${POSTGRES_HOST:-zammad-postgresql}
+      - POSTGRESQL_USER=${POSTGRES_USER:-zammad}
+      - POSTGRESQL_PASS=${POSTGRES_PASS:-zammad}
+      - POSTGRESQL_PORT=${POSTGRES_PORT:-5432}
+      - POSTGRESQL_OPTIONS=${POSTGRESQL_OPTIONS:-?pool=50}
+      - REDIS_URL=${REDIS_URL:-redis://zammad-redis:6379}
+      - ELASTICSEARCH_ENABLED=${ELASTICSEARCH_ENABLED:-true}
+      - ELASTICSEARCH_SCHEMA=http
+      - ELASTICSEARCH_HOST=${ELASTICSEARCH_HOST:-zammad-elasticsearch}
+      - ELASTICSEARCH_PORT=${ELASTICSEARCH_PORT:-9200}
+      - NGINX_PORT=${NGINX_PORT:-8080}
+      - NGINX_SERVER_NAME=${NGINX_SERVER_NAME:-_}
+      - NGINX_SERVER_SCHEME=$scheme
+      - RAILS_TRUSTED_PROXIES=${RAILS_TRUSTED_PROXIES:-"['127.0.0.1', '::1']"}
+    ports:
+      - "${ZAMMAD_PORT:-8080}:${NGINX_PORT:-8080}"
     networks:
-      - zammad
       - proxy
+      - internal
     depends_on:
       - zammad-railsserver
-    expose:
-      - "${NGINX_PORT:-8080}"
-    ports:
-      - "${NGINX_PORT:-8080}:${NGINX_PORT:-8080}"
     command: ["zammad-nginx"]
 
 networks:
   proxy:
     external: true
-  zammad:
-    driver: bridge
+  internal:

zammad_dev/sample.env

@@ -1,138 +1,27 @@
-#############################################
-# Docker Environment Variables
-# https://docs.zammad.org/en/latest/install/docker-compose/environment.html
-#############################################
-
-ZAMMAD_RAILS_IMAGE=ghcr.io/zammad/zammad:latest
+# Compose
+VOL_PATH=/data
+ZAMMAD_IMAGE=ghcr.io/zammad/zammad:latest
 ZAMMAD_RESTART=always
-scheme=http
-AWS_REGION=dummy
+ZAMMAD_PORT=8080
 
-# From Zammad Documentation
-# Base path for all persistent data (defaults to ./data relative to docker-compose.yml)
+# PostgreSQL
+POSTGRES_VERSION=17.5-alpine
+POSTGRES_DB=zammad_production
+POSTGRES_USER=zammad
+POSTGRES_PASS=zammad
 
-# Use a fixed Zammad version rather than the default. If you do so,
-#   you are responsible to update this to newer patch level versions yourself.
-# The tag format is zammad-VERSION-BUILD (e.g., zammad-6.5.1-1). Check https://hub.docker.com/r/zammad/zammad-docker-compose/tags for latest.
-# VERSION=6.5.1
-# You can also use floating versions that will give you automatic updates:
-# VERSION=6.2     # all patchlevel updates
-# VERSION=6       # including minor updates
-# VERSION=latest  # all updates of stable versions, including major
-# VERSION=develop # bleeding-edge development version
-# IMAGE_REPO=zammad/zammad-docker-compose
+# Redis
+REDIS_VERSION=7.4.5-alpine
 
-# ELASTICSEARCH_VERSION=8.19.2
-# MEMCACHE_SERVERS=zammad-memcached:11211
-# MEMCACHE_VERSION=1.6.39-alpine
-# REDIS_URL=redis://zammad-redis:6379
-# REDIS_VERSION=7.4.5-alpine
-# POSTGRES_VERSION=17.5-alpine
+# Memcached
+MEMCACHE_VERSION=1.6.39-alpine
 
-# POSTGRES_DB=zammad_production
-# POSTGRES_PASS=zammad
-# POSTGRES_USER=zammad
-# POSTGRES_HOST=zammad-postgresql
-# POSTGRES_PORT=5432
-# POSTGRESQL_OPTIONS=?pool=50
-# POSTGRESQL_DB_CREATE=true
-
-# ELASTICSEARCH_ENABLED=true
-# ELASTICSEARCH_SCHEMA=http
-# ELASTICSEARCH_HOST=zammad-elasticsearch
-# ELASTICSEARCH_PORT=9200
-# ELASTICSEARCH_USER=  # Leave empty if no auth (xpack.security.enabled=false)
-# ELASTICSEARCH_PASS=
-# ELASTICSEARCH_NAMESPACE=zammad
-# ELASTICSEARCH_REINDEX=  # Set to 'true' to force reindex
-# ELASTICSEARCH_JAVA_OPTS=-Xms1g -Xmx1g
-
-# RAILS_TRUSTED_PROXIES=  # Default: ['127.0.0.1', '::1']
-# ZAMMAD_HTTP_TYPE=  # e.g., 'https'
-# ZAMMAD_FQDN=  # e.g., yourdomain.com
+# Elasticsearch
+ELASTICSEARCH_VERSION=8.19.2
+ELASTICSEARCH_ENABLED=true
+ELASTICSEARCH_JAVA_OPTS=-Xms1g -Xmx1g
 
+# Zammad
+TZ=America/Vancouver
 NGINX_PORT=8080
-# NGINX_EXPOSE_PORT=8080
-# NGINX_CLIENT_MAX_BODY_SIZE=50M
-# NGINX_SERVER_NAME=_  # '_' matches all; set to your FQDN/IP for restriction
-NGINX_SERVER_SCHEME=$scheme  # Or force 'http'/'https'
-
-# Backup settings
-# BACKUP_DIR=/var/tmp/zammad
-# BACKUP_TIME=03:00
-# HOLD_DAYS=10
-
-# App tuning (scale workers as needed)
-# ZAMMAD_WEB_CONCURRENCY=  # e.g., 4 for more concurrent web connections
-# ZAMMAD_PROCESS_SESSIONS_JOBS_WORKERS=  # e.g., 2
-# ZAMMAD_PROCESS_SCHEDULED_JOBS_WORKERS=1
-# ZAMMAD_PROCESS_DELAYED_JOBS_WORKERS=  # e.g., 3
-
-# Variables used by nginx-proxy container for reverse proxy creations,
-#   for docs refer to https://github.com/nginx-proxy/nginx-proxy.
-# VIRTUAL_HOST=yourdomain.com
-# VIRTUAL_PORT=80
-
-# Variables used by acme-companion for retrieval of LetsEncrypt certificate,
-#   for docs refer to https://github.com/nginx-proxy/acme-companion.
-# LETSENCRYPT_HOST=yourdomain.com
-# LETSENCRYPT_EMAIL=admin@yourdomain.com
-
-#############################################
-# scenarios/add-cloudflare-tunnel.yml
-#############################################
-
-# CLOUDFLARE_TUNNEL_TOKEN=mytoken
-
-#############################################
-# scenarios/add-external-network-to-nginx.yml
-#############################################
-
-# ZAMMAD_NGINX_EXTERNAL_NETWORK=mynetwork
-
-#############################################
-# scenarios/add-external-network-to-elasticsearch.yml
-#############################################
-
-# ZAMMAD_ELASTICSEARCH_EXTERNAL_NETWORK=mynetwork
-
-#############################################
-# scenarios/add-hostport-to-elasticsearch.yml
-#############################################
-
-# Defaults to 9200, set this if you need another value.
-# ELASTICSEARCH_EXPOSE_HTTP_PORT=9200
-
-#############################################
-# scenarios/add-ollama.yml
-#############################################
-
-# OLLAMA_PULL_MODEL=llama3.2
-
-#############################################
-# scenarios/apply-resource-limits.yml
-#############################################
-
-# By loading the scenario, these default limits
-# are applied. Uncomment and change if needed.
-
-# ZAMMAD_BACKUP_RESOURCES_LIMITS_CPUS=1.0
-# ZAMMAD_BACKUP_RESOURCES_LIMITS_MEMORY=500m
-# ZAMMAD_ELASTICSEARCH_RESOURCES_LIMITS_CPUS=1.0
-# ZAMMAD_ELASTICSEARCH_RESOURCES_LIMITS_MEMORY=1G
-# ZAMMAD_INIT_RESOURCES_LIMITS_CPUS=1.0
-# ZAMMAD_INIT_RESOURCES_LIMITS_MEMORY=500M
-# ZAMMAD_MEMCACHED_RESOURCES_LIMITS_CPUS=1.0
-# ZAMMAD_MEMCACHED_RESOURCES_LIMITS_MEMORY=500M
-# ZAMMAD_NGINX_RESOURCES_LIMITS_CPUS=1.0
-# ZAMMAD_NGINX_RESOURCES_LIMITS_MEMORY=500M
-# ZAMMAD_POSTGRESQL_RESOURCES_LIMITS_CPUS=1.0
-# ZAMMAD_POSTGRESQL_RESOURCES_LIMITS_MEMORY=500M
-# ZAMMAD_RAILSSERVER_RESOURCES_LIMITS_CPUS=1.0
-# ZAMMAD_RAILSSERVER_RESOURCES_LIMITS_MEMORY=500M
-# ZAMMAD_REDIS_RESOURCES_LIMITS_CPUS=1.0
-# ZAMMAD_REDIS_RESOURCES_LIMITS_MEMORY=500M
-# ZAMMAD_SCHEDULER_RESOURCES_LIMITS_CPUS=1.0
-# ZAMMAD_SCHEDULER_RESOURCES_LIMITS_MEMORY=500M
-# ZAMMAD_WEBSOCKET_RESOURCES_LIMITS_CPUS=1.0
-# ZAMMAD_WEBSOCKET_RESOURCES_LIMITS_MEMORY=500M
+NGINX_SERVER_NAME=_