version: "3"
services:
  piwigo:
    image: lscr.io/linuxserver/piwigo:latest
    container_name: piwigo
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - HTTPS=on
    volumes:
      - ./piwigo/config:/config
      - ./piwigo/data/gallery:/gallery
    ports:
      - "472:80"
    restart: unless-stopped

  mariadb:
    image: mariadb:latest
    container_name: mariadb
    environment:
      - MYSQL_ROOT_PASSWORD=
      - MYSQL_DATABASE=piwigodb
      - MYSQL_USER=eoran
      - MYSQL_PASSWORD=
    volumes:
      - ./mariadb/data:/var/lib/mysql
    restart: unless-stopped

  phpmyadmin:
    image: phpmyadmin/phpmyadmin:latest
    container_name: phpmyadmin
    environment:
      - PMA_HOST=mariadb
      - PMA_ARBITRARY=1
    ports:
      - "245:80"
    restart: unless-stopped

server {
    listen 80;
    server_name gamearea.freeboxos.fr;
    location / {
        return 301 https://$host$request_uri;
    }
}

server {
    
    server_name gamearea.freeboxos.fr; # managed by Certbot
    
    # Modification de la valeur max de HSTS
    add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;

    proxy_read_timeout 300;
    client_max_body_size 100G;
    # client_body_buffer_size 100G;
    
    location / {
        # ignore les requêtes externes sur /
        return 444;

    }

    
  location /piwigo/ {
      proxy_pass http://127.0.0.1:472/;
      proxy_http_version 1.1;
      http2_push_preload on; # Enable http2 push

      proxy_set_header   Host               127.0.0.1:472;
      proxy_set_header   X-Forwarded-Proto  $scheme;
      proxy_set_header   X-Forwarded-Host   $http_host;
      proxy_set_header   X-Forwarded-For    $remote_addr;
      proxy_set_header   X-Real-IP          $remote_addr;

      # Allow cross-origin requests for fonts
      location ~* \.(eot|ttf|woff|woff2)$ {
    add_header Access-Control-Allow-Origin *;
      }

      # Cache fonts for better performance
      location ~* \.(eot|ttf|woff|woff2)$ {
    expires 365d;
      }
  }

    


    listen [::]:443 ssl ipv6only=on; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/gamearea.freeboxos.fr/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/gamearea.freeboxos.fr/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}