services:
  bookstack:
    image: lscr.io/linuxserver/bookstack:latest
    container_name: bookstack
    env_file:
      - runtime.env
    expose:
      - "6875"
    environment:
      - PUID=1000
      - PGID=1000
      - DB_HOST=bookstack-db
      - DB_PORT=3306
      - DB_USERNAME=bookstack
      - DB_DATABASE=bookstack
    volumes:
      - bookstack-data:/config
    depends_on:
      - db
    networks:
      - proxy
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true

  db:
    image: mariadb:10.11
    container_name: bookstack-db
    read_only: true
    env_file:
      - runtime.env
    environment:
      - MYSQL_DATABASE=bookstack
      - MYSQL_USER=bookstack
    volumes:
      - mariadb-data:/var/lib/mysql
    tmpfs:
      - /tmp
      - /run/mysqld
    networks:
      - proxy
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true

volumes:
  bookstack-data:
    name: bookstack-data
  mariadb-data:
    name: mariadb-data

networks:
  proxy:
    name: proxy
    external: true