version: "3"
services:
  rssbridge:
    image: rssbridge/rss-bridge:latest
    networks:
      - rssbridgenet
    ports:
      - "127.0.0.1:3080:80"
    restart: unless-stopped
    depends_on:
      - nginx
    volumes:
      - ./whitelist.txt:/app/whitelist.txt
    # volumes:
    #   - ./nginx.conf:/etc/nginx/nginx.conf:ro
    #   - /etc/letsencrypt/archive/rssgen.terminaldweller.com/:/certs/:ro
    # cap_drop:
    #   - ALL
  nginx:
    image: nginx:stable
    ports:
      - "3000:443"
    networks:
      - rssbridgenet
    restart: unless-stopped
    cap_drop:
      - ALL
    cap_add:
      - CHOWN
      - DAC_OVERRIDE
      - SETGID
      - SETUID
      - NET_BIND_SERVICE
    volumes:
      - ./nginx.conf:/etc/nginx/nginx.conf:ro
      - /etc/letsencrypt/live/rssgen.terminaldweller.com/fullchain.pem:/etc/letsencrypt/live/rssgen.terminaldweller.com/fullchain.pem:ro
      - /etc/letsencrypt/live/rssgen.terminaldweller.com/privkey.pem:/etc/letsencrypt/live/rssgen.terminaldweller.com/privkey.pem:ro
networks:
  rssbridgenet: