version: '3.2'

networks:
    confluence:
        driver: bridge

services:
    mysql:
        image: registry.cn-hangzhou.aliyuncs.com/zhengyu1992/mysql:5.7.29
        container_name: mysql
        restart: always
        environment:
          TZ: Asia/Shanghai
          MYSQL_ROOT_PASSWORD: Blala007!
          MYSQL_DATABASE: confluence
          MYSQL_USER: confluence
          MYSQL_PASSWORD: Blala007!
        command:
            #mysql5.7及以上 版本 默认连接方式 不是以密码形式连接 所以远程连接不方便 改为密码连接
            --default-authentication-plugin=mysql_native_password
            --character-set-server=utf8mb4
            --collation-server=utf8mb4_bin
            --explicit_defaults_for_timestamp=true
            --lower_case_table_names=1
            --skip-ssl
            --max_allowed_packet=128M
            --innodb_log_file_size=256M
            --transaction-isolation=READ-COMMITTED
        volumes:
            - /data/confluence/mysql:/var/lib/mysql
        ports:
            - "13306:3306"
        networks:
            - confluence

    confluence:
        image: registry.cn-hangzhou.aliyuncs.com/zhengyu1992/confluence:7.15.0_m1
        container_name: confluence
        restart: always
        volumes:
            - /data/confluence/data:/var/atlassian/application-data/confluence
            - /data/confluence/config/mysql-connector-java-5.1.47-bin.jar:/opt/atlassian/confluence/confluence/WEB-INF/lib/mysql-connector-java-5.1.47-bin.jar
            - /data/confluence/config/atlassian-extras-2.4.jar:/opt/atlassian/confluence/confluence/WEB-INF/lib/atlassian-extras-decoder-v2-3.4.1.jar
            - /data/confluence/config/server.xml:/opt/atlassian/confluence/conf/server.xml
        ports:
            - "18090:8090"
            - "18091:8091"
        links:
            - "mysql:db"
        networks:
            - confluence

server {
    listen 80;
    server_name zhengyu1992.cn;
    location / {
        return 301 https://zhengyu1992.cn$request_uri;
    }
}
server {
    listen 443  ssl;
    server_name zhengyu1992.cn;
    client_max_body_size 8192m;
    ssl_certificate /etc/nginx/certs/zhengyu1992.cn.pem;
    ssl_certificate_key /etc/nginx/certs/zhengyu1992.cn.key;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_session_timeout      1d;
    ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+ECDSA+AES128:EECDH+aRSA+AES128:RSA+AES128:EECDH+ECDSA+AES256:EECDH+aRSA+AES256:RSA+AES256:EECDH+ECDSA+3DES:EECDH+aRSA+3DES:RSA+3DES:!MD5;
    ssl_prefer_server_ciphers on;

    location / {
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://localhost:18090;
    }

}