# /root/docker/guacamole/docker-compose.yml
services:
  guacd:
    image: guacamole/guacd:1.6.0
    container_name: guacd
    restart: unless-stopped
    networks:
      - guac-internal

  postgres:
    image: postgres:16
    container_name: guac-postgres
    restart: unless-stopped
    environment:
      POSTGRES_DB: guacamole_db
      POSTGRES_USER: guacamole
      POSTGRES_PASSWORD: 'c~dXXUbkV2/f`UL^m#RAq8i=n!DL06#N'
    volumes:
      - ./data/postgres:/var/lib/postgresql/data
    networks:
      - guac-internal

  guacamole:
    image: guacamole/guacamole:1.6.0
    container_name: guacamole
    restart: unless-stopped
    depends_on:
      - guacd
      - postgres
    environment:
      GUACD_HOSTNAME: guacd
      POSTGRESQL_HOSTNAME: postgres
      POSTGRESQL_DATABASE: guacamole_db
      POSTGRESQL_USERNAME: guacamole
      POSTGRESQL_PASSWORD: 'c~dXXUbkV2/f`UL^m#RAq8i=n!DL06#N'
    volumes:
      - ./data/guacamole:/etc/guacamole
    expose:
      - "8080"
    networks:
      - guac-internal
      - webproxy-net
    labels:
      - traefik.enable=true
      - traefik.docker.network=webproxy-net

      #Haupt-Router für Guacamole
      - traefik.http.routers.guac.rule=Host(`guacamole.focus-on-it.net`)
      - traefik.http.routers.guac.entrypoints=websecure
      - traefik.http.routers.guac.tls=true
      - traefik.http.routers.guac.tls.certresolver=le
      - traefik.http.services.guac.loadbalancer.server.port=8080

      # Redirect / -> /guacamole/
      - traefik.http.routers.guac-root.rule=Host(`guacamole.focus-on-it.net`) && Path(`/`)
      - traefik.http.routers.guac-root.entrypoints=websecure
      - traefik.http.routers.guac-root.tls=true
      - traefik.http.routers.guac-root.tls.certresolver=le
      - traefik.http.routers.guac-root.middlewares=guac-root-redirect
      - traefik.http.middlewares.guac-root-redirect.redirectregex.regex=^https://guacamole\.focus-on-it\.net/$
      - traefik.http.middlewares.guac-root-redirect.redirectregex.replacement=https://guacamole.focus-on-it.net/guacamole/
      - traefik.http.middlewares.guac-root-redirect.redirectregex.permanent=false
networks:
  guac-internal:
    driver: bridge
  webproxy-net:
    external: true