version: '2'
services:
  rocketchat:
   image: rocketchat/rocket.chat:latest
   command: >
    bash -c
     "for i in `seq 1 30`; do
      node main.js &&
      s=$$? && break || s=$$?;
      echo \"Tried $$i times. Waiting 5 secs...\";
      sleep 5;
     done; (exit $$s)"
   restart: unless-stopped
   volumes:
    - ./uploads:/app/uploads
   environment:
    - PORT=3000
    - ROOT_URL=http://localhost:3000
    - MONGO_URL=mongodb://mongo:27017/rocketchat
    - MONGO_OPLOG_URL=mongodb://mongo:27017/local
    - MAIL_URL=smtp://smtp.email
#    - HTTP_PROXY=http://proxy.domain.com
#    - HTTPS_PROXY=http://proxy.domain.com
   depends_on:
    - mongo
   ports:
    - 3000:3000
   labels:
    - "traefik.backend=rocketchat"
    - "traefik.frontend.rule=Host: your.domain.tld"
  mongo:
   image: mongo:4.0
   restart: unless-stopped
   volumes:
   - ./data/db:/data/db
   #- ./data/dump:/dump
   command: mongod --smallfiles --oplogSize 128 --replSet rs0 --storageEngine=mmapv1
   labels:
    - "traefik.enable=false"
  # this container's job is just run the command to initialize the replica set.
  # it will run the command and remove himself (it will not stay running)
  mongo-init-replica:
   image: mongo:4.0
   command: >
    bash -c
     "for i in `seq 1 30`; do
      mongo mongo/rocketchat --eval \"
       rs.initiate({
        _id: 'rs0',
        members: [ { _id: 0, host: 'localhost:27017' } ]})\" &&
      s=$$? && break || s=$$?;
      echo \"Tried $$i times. Waiting 5 secs...\";
      sleep 5;
     done; (exit $$s)"
   depends_on:
    - mongo
  # hubot, the popular chatbot (add the bot user first and change the password before starting this image)
  hubot:
   image: rocketchat/hubot-rocketchat:latest
   restart: unless-stopped
   environment:
    - ROCKETCHAT_URL=rocketchat:3000
    - ROCKETCHAT_ROOM=GENERAL
    - ROCKETCHAT_USER=bot
    - ROCKETCHAT_PASSWORD=botpassword
    - BOT_NAME=bot
  # you can add more scripts as you'd like here, they need to be installable by npm
    - EXTERNAL_SCRIPTS=hubot-help,hubot-seen,hubot-links,hubot-diagnostics
   depends_on:
    - rocketchat
   labels:
    - "traefik.enable=false"
   volumes:
    - ./scripts:/home/hubot/scripts
  # this is used to expose the hubot port for notifications on the host on port 3001, e.g. for hubot-jenkins-notifier
   ports:
    - 3001:8080
  #traefik:
  #  image: traefik:latest
  #  restart: unless-stopped
  #  command: >
  #   traefik
  #   --docker
  #   --acme=true
  #   --acme.domains='your.domain.tld'
  #   --acme.email='your@email.tld'
  #   --acme.entrypoint=https
  #   --acme.storagefile=acme.json
  #   --defaultentrypoints=http
  #   --defaultentrypoints=https
  #   --entryPoints='Name:http Address::80 Redirect.EntryPoint:https'
  #   --entryPoints='Name:https Address::443 TLS.Certificates:'
  #  ports:
  #   - 80:80
  #   - 443:443
  #  volumes:
  #   - /var/run/docker.sock:/var/run/docker.sock

server {
     listen 443;
     # rocketchat
     server_name rocketchat.domain.com;
     ssl on;
     # root html;
     # index index.html index.htm;
     # SSL證書(shū)放在了同級(jí)目錄domain文件夾下面
     ssl_certificate cert/domain/rocketchat.domain.com_bundle.crt;
     ssl_certificate_key cert/domain/rocketchat.domain.com.key;
     ssl_session_timeout 5m;
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
     ssl_prefer_server_ciphers on;
     location / {
       # 指向當(dāng)前的某個(gè)服務(wù)端口
       proxy_pass http://127.0.0.1:5001;
       #設(shè)置請(qǐng)求頭，并將頭信息傳遞給服務(wù)器端
       proxy_redirect off;
       proxy_set_header Host $host;
       proxy_http_version 1.1;
       proxy_set_header Upgrade $http_upgrade;
       proxy_set_header Connection "upgrade";
     }
   }