# Managed by Ansible (role xmpp). After compose.yaml and
# compose.tackygram.yaml of anotherim-server, CERTS=files.
services:
  ejabberd:
    image: dev.another.im/another-im/anotherim-server:{{ xmpp_ejabberd_version }}
    env_file:
      - settings.env
      - state/secrets.env
    ports:
      - "5222:5222"                   # clients, STARTTLS
      - "5223:5223"                   # clients, direct TLS
      - "5269:5269"                   # other servers
      - "5443:5443"                   # WebSocket, host-meta
      - "8448:8448"                   # Matrix federation
      - "3478:3478/udp"               # STUN and TURN
      - "3478:3478/tcp"
      - "49160-49199:49160-49199/udp" # TURN relay
      - "7777:7777"                   # SOCKS5 bytestreams proxy
      - "{{ xmpp_tackygram_call_ports }}:{{ xmpp_tackygram_call_ports }}/udp" # gateway calls
    volumes:
      - database:/opt/ejabberd/database
      - logs:/opt/ejabberd/logs
      - ./state/certs:/opt/ejabberd/conf/certs:ro
    restart: unless-stopped

  # Push App Server and Telegram gateway share ejabberd's network
  # namespace: they reach its component port on 127.0.0.1 only.
  apushd:
    image: dev.another.im/another-im/apushd:{{ xmpp_apushd_version }}
    network_mode: service:ejabberd
    depends_on: [ejabberd]
    volumes:
      - ./state/apushd:/etc/apushd:ro
    restart: unless-stopped

  tackygram:
    image: dev.another.im/another-im/tackygram:{{ xmpp_tackygram_version }}
    network_mode: service:ejabberd
    depends_on: [ejabberd]
    env_file:
      - state/tackygram/env
    environment:
      CREDENTIALS_DIRECTORY: /run/credentials
      TACKYGRAM_CALL_IP: "{{ public_ip }}"
      TACKYGRAM_CALL_PORTS: "{{ xmpp_tackygram_call_ports }}"
    volumes:
      - tackygram:/var/lib/tackygram
      - ./state/tackygram/key:/run/credentials/gateway-key:ro
    restart: unless-stopped

volumes:
  database:
  logs:
  tackygram: