docker-compose.yml

version: "3"

volumes:
  mysql:
    driver: local
  wordpress:
    driver: local

services:
  mysqlwp:
    restart: always
    image: mariadb:focal
    container_name: mysqlwp
    command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW --innodb-file-per-table=1 --skip-innodb-read-only-compressed
    env_file:
      - .env
    security_opt:
      - no-new-privileges
    networks:
      - internal
    environment:
      - MYSQL_ROOT_PASSWORD=${ROOT_PASSWORD}
      - MYSQL_PASSWORD=${PASSWORD}
      - MYSQL_DATABASE=${DATABASE}
      - MYSQL_USER=${USER}
    volumes:
      - /patch/to/data/wordpress/mysql:/var/lib/mysql
    labels:
      - "traefik.enable=false"

  wpredis:
    container_name: wpredis
    image: redis
    restart: unless-stopped
    volumes:
      - $HOME/miriboss/wordpress/redis:/data
    networks:
      - internal

  blog:
    image: wordpress:latest
    container_name: wordpress
    restart: always
    env_file:
      - .env
    security_opt:
      - no-new-privileges
    networks:
      - internal
      - proxy
    depends_on:
      - mysqlwp
    labels:
      # wordpress
      - "traefik.enable=true"
      - "traefik.http.routers.wordpress.rule=Host(`${HOST_DOMAIN}`)"
      - "traefik.http.routers.wordpress.entrypoints=websecure"
      - "traefik.http.routers.wordpress.tls=true"
      - "traefik.http.routers.wordpress.tls.certresolver=lets-encrypt"
      - "traefik.http.services.wordpress.loadbalancer.server.port=80"
      - "traefik.http.middlewares.wordpress.headers.sslredirect=true"
    environment:
      WORDPRESS_DB_PASSWORD: ${PASSWORD}
      WORDPRESS_DB_HOST: mysqlwp:3306
      WORDPRESS_DB_NAME: ${DATABASE}
      WORDPRESS_DB_USER: ${USER}
    volumes:
      - /patch/to/data/wordpress:/var/www/html

networks:
  proxy:
    external: true
  internal:
    external: false