version: "3.9"

# Standalone docker-compose for ONLYOFFICE Document Server
# Works independently without Runtipi

services:
  onlyoffice-docs:
    image: onlyoffice/documentserver:8.2
    container_name: onlyoffice-docs
    restart: unless-stopped
    ports:
      - "${ONLYOFFICE_PORT:-8044}:80"
    environment:
      # JWT Configuration
      - JWT_ENABLED=${JWT_ENABLED:-true}
      - JWT_SECRET=${JWT_SECRET:?JWT_SECRET is required}
      - JWT_HEADER=${JWT_HEADER:-Authorization}
      - JWT_IN_BODY=${JWT_IN_BODY:-false}
      # Storage Configuration
      - USE_UNAUTHORIZED_STORAGE=${USE_UNAUTHORIZED_STORAGE:-false}
      # WOPI Configuration
      - WOPI_ENABLED=${WOPI_ENABLED:-false}
      # Performance tuning
      - NGINX_WORKER_PROCESSES=auto
      - NGINX_WORKER_CONNECTIONS=4096
      # Font generation
      - GENERATE_FONTS=true
    volumes:
      # Logs
      - ./data/logs:/var/log/onlyoffice
      # Certificates and data
      - ./data/data:/var/www/onlyoffice/Data
      # File cache
      - ./data/lib:/var/lib/onlyoffice
      # Internal PostgreSQL database
      - ./data/db:/var/lib/postgresql
      # Custom fonts (optional)
      - ./data/fonts:/usr/share/fonts/truetype/custom
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost/healthcheck"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 60s