version: '3'
services:
  pebble:
    image: letsencrypt/pebble:latest
    # TODO enable -strict
    command: pebble -config /test/config/pebble-config.json -dnsserver 10.30.50.3:8053
    environment:
      # with Go 1.13.x which defaults TLS 1.3 to on
      GODEBUG: "tls13=1"
      # Don't re-use authorisations (breaks force renew test scripts)
      # PEBBLE_AUTHZREUSE: "0"
    ports:
      - 14000:14000  # HTTPS ACME API
      - 15000:15000  # HTTPS Management API
    networks:
      acmenet:
        ipv4_address: 10.30.50.2
  challtestsrv:
    image: letsencrypt/pebble-challtestsrv:latest
    command: pebble-challtestsrv -defaultIPv6 "" -defaultIPv4 10.30.50.3
    ports:
      - 8055:8055  # HTTP Management API
    networks:
      acmenet:
        ipv4_address: 10.30.50.3
  getssl-ubuntu18:
    build:
      context: .
      dockerfile: test/Dockerfile-ubuntu18
    container_name: getssl-ubuntu18
    volumes:
      - .:/getssl
    environment:
      GETSSL_HOST: ubuntu18.getssl.test
      GETSSL_IP: 10.30.50.4
      NGINX_CONFIG: /etc/nginx/sites-enabled/default
    networks:
      acmenet:
        ipv4_address: 10.30.50.4
        aliases:
          - ubuntu18.getssl.test
          - a.ubuntu18.getssl.test
          - b.ubuntu18.getssl.test
          - c.ubuntu18.getssl.test
          - d.ubuntu18.getssl.test
          - e.ubuntu18.getssl.test
          - f.ubuntu18.getssl.test
          - g.ubuntu18.getssl.test
          - h.ubuntu18.getssl.test
          - i.ubuntu18.getssl.test
          - j.ubuntu18.getssl.test
          - k.ubuntu18.getssl.test
  getssl-centos6:
    build:
      context: .
      dockerfile: test/Dockerfile-centos6
    container_name: getssl-centos6
    volumes:
      - .:/getssl
    environment:
      GETSSL_HOST: centos6.getssl.test
      GETSSL_IP: 10.30.50.5
      NGINX_CONFIG: /etc/nginx/conf.d/default.conf
    networks:
      acmenet:
        ipv4_address: 10.30.50.5
        aliases:
          -   centos6.getssl.test
          - a.centos6.getssl.test
          - b.centos6.getssl.test
          - c.centos6.getssl.test
          - d.centos6.getssl.test
          - e.centos6.getssl.test
          - f.centos6.getssl.test
          - g.centos6.getssl.test
          - h.centos6.getssl.test
          - i.centos6.getssl.test
          - j.centos6.getssl.test
          - k.centos6.getssl.test
  getssl-ubuntu18-no-gawk:
    build:
      context: .
      dockerfile: test/Dockerfile-ubuntu18-no-gawk
    container_name: getssl-ubuntu18-no-gawk
    volumes:
      - .:/getssl
    environment:
      GETSSL_HOST: ubuntu18-no-gawk.getssl.test
      GETSSL_IP: 10.30.50.6
      NGINX_CONFIG: /etc/nginx/sites-enabled/default
      TEST_AWK: "yes"
    networks:
      acmenet:
        ipv4_address: 10.30.50.6
        aliases:
          - ubuntu18-no-gawk.getssl.test

networks:
  acmenet:
    driver: bridge
    ipam:
      driver: default
      config:
        - subnet: 10.30.50.0/24