Titel

services:
  # UI Dashboard
  dashboard:
    image: netbirdio/dashboard:latest
    restart: unless-stopped
    logging:
      driver: json-file
      options:
        max-size: "500m"
        max-file: "2"
    ports:
      - "8088:80"
      - "4434:443"
    environment:
      NETBIRD_MGMT_API_ENDPOINT: "https://netbird.36px.de"
      NETBIRD_MGMT_GRPC_API_ENDPOINT: "https://netbird.36px.de"
      AUTH_AUDIENCE: "xxxx"
      AUTH_CLIENT_ID: "xxxx"
      AUTH_CLIENT_SECRET: ""
      AUTH_AUTHORITY: "https://id.36px.de"
      USE_AUTH0: "false"
      AUTH_SUPPORTED_SCOPES: "openid profile email groups"
      AUTH_REDIRECT_URI: "/auth"
      AUTH_SILENT_REDIRECT_URI: "/silent-auth"
      NETBIRD_TOKEN_SOURCE: "idToken"
      NGINX_SSL_PORT: "443"

  # Signal
  signal:
    image: netbirdio/signal:latest
    restart: unless-stopped
    logging:
      driver: json-file
      options:
        max-size: "500m"
        max-file: "2"
    volumes:
      - netbird-signal:/var/lib/netbird
    ports:
      - "10000:80"

  # Relay
  relay:
    image: netbirdio/relay:latest
    restart: unless-stopped
    logging:
      driver: json-file
      options:
        max-size: "500m"
        max-file: "2"
    environment:
      NB_LOG_LEVEL: "info"
      NB_LISTEN_ADDRESS: ":33080"
      NB_EXPOSED_ADDRESS: "rels://netbird.36px.de:33080/relay"
      NB_AUTH_SECRET: "xxxx"
    ports:
      - "33080:33080"

  # Management
  management:
    image: netbirdio/management:latest
    restart: unless-stopped
    logging:
      driver: json-file
      options:
        max-size: "500m"
        max-file: "2"
    depends_on:
      - dashboard
    volumes:
      - netbird-mgmt:/var/lib/netbird
      - ./management.json:/etc/netbird/management.json:ro
    ports:
      - "33073:443"
    command:
      - "--port"
      - "443"
      - "--log-file"
      - "console"
      - "--log-level"
      - "info"
      - "--disable-anonymous-metrics=true"
      - "--single-account-mode-domain=netbird.36px.de"
      - "--dns-domain=36px.lan"

  # Coturn (TURN)
  coturn:
    image: coturn/coturn:latest
    restart: unless-stopped
    logging:
      driver: json-file
      options:
        max-size: "500m"
        max-file: "2"
    network_mode: host
    command:
      - "-n"
      - "--listening-port=3478"
      - "--tls-listening-port=5349"
      - "--external-ip=xxxx"
      - "--min-port=49152"
      - "--max-port=65535"
      - "--fingerprint"
      - "--lt-cred-mech"
      - "--user=self:3xontMpniBW/9QJ0yx2DzyeoEn/Q6qJUMo05086/yZ0"
      - "--realm=wiretrustee.com"
      - "--cert=/etc/coturn/certs/cert.pem"
      - "--pkey=/etc/coturn/private/privkey.pem"
      - "--log-file=stdout"
      - "--no-software-attribute"
      - "--pidfile=/var/tmp/turnserver.pid"
      - "--no-cli"

volumes:
  netbird-mgmt:
  netbird-signal:

#NETBIRD_DASHBOARD_TAG=""
#NETBIRD_SIGNAL_TAG=""
#NETBIRD_MANAGEMENT_TAG=""
#COTURN_TAG=""
#NETBIRD_RELAY_TAG=""

NETBIRD_DOMAIN="netbird.36px.de"
NETBIRD_TURN_DOMAIN="netbird.36px.de"
NETBIRD_TURN_EXTERNAL_IP="netbird.36px.de"

NETBIRD_AUTH_OIDC_CONFIGURATION_ENDPOINT="https://id.36px.de/.well-known/openid-configuration"
NETBIRD_USE_AUTH0=false
NETBIRD_AUTH_CLIENT_ID="48b4f762-cccb-4300-98fb-a865a3f103bf"
NETBIRD_AUTH_SUPPORTED_SCOPES="openid profile email groups"
NETBIRD_AUTH_AUDIENCE="48b4f762-cccb-4300-98fb-a865a3f103bf"
NETBIRD_AUTH_REDIRECT_URI="/auth"
NETBIRD_AUTH_SILENT_REDIRECT_URI="/silent-auth"
NETBIRD_TOKEN_SOURCE="idToken"

NETBIRD_AUTH_DEVICE_AUTH_PROVIDER="none"
NETBIRD_AUTH_DEVICE_AUTH_CLIENT_ID="48b4f762-cccb-4300-98fb-a865a3f103bf"
NETBIRD_AUTH_DEVICE_AUTH_AUDIENCE="48b4f762-cccb-4300-98fb-a865a3f103bf"
NETBIRD_AUTH_DEVICE_AUTH_SCOPE="openid profile email groups"
NETBIRD_AUTH_DEVICE_AUTH_USE_ID_TOKEN=true

NETBIRD_MGMT_IDP="pocketid"
NETBIRD_IDP_MGMT_CLIENT_ID="netbird"
NETBIRD_IDP_MGMT_EXTRA_MANAGEMENT_ENDPOINT="https://id.36px.de"
NETBIRD_IDP_MGMT_EXTRA_API_TOKEN="O7kRjwXIyCGRfWmCM0msAnI7n8Lpg6iO"

NETBIRD_AUTH_PKCE_REDIRECT_URL_PORTS="53000"

NETBIRD_DISABLE_LETSENCRYPT=true
NETBIRD_DISABLE_ANONYMOUS_METRICS=true

NETBIRD_MGMT_DNS_DOMAIN="36px.lan"

NETBIRD_MGMT_DISABLE_DEFAULT_POLICY=false

NETBIRD_RELAY_DOMAIN="netbird.36px.de"
NETBIRD_RELAY_PORT="33080"

NETBIRD_SIGNAL_PORT="10000"
NETBIRD_SIGNAL_PROTOCOL="http"

NETBIRD_MGMT_API_PORT="33073"
NETBIRD_MGMT_API_ENDPOINT="https://netbird.36px.de"
NETBIRD_MGMT_GRPC_API_ENDPOINT="https://netbird.36px.de"