services:
  nginx:
    image: nginx:latest
    # Stable name so the host-side certbot deploy hook can target the container.
    container_name: nginx-proxy
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf
      - ./sites-available:/etc/nginx/sites-available
      - ./sites-enabled:/etc/nginx/sites-enabled
      - ./log:/var/log/nginx
      - /etc/letsencrypt:/etc/letsencrypt:ro

    restart: always
    ports:
      - 443:443
    networks:
      - vaultwarden-network
      - forgejo-network
      - nextcloud-network

networks:
  vaultwarden-network:
    external: true
  forgejo-network:
    external: true
  nextcloud-network:
    external: true