version: "3.5"

services:
  kopano_kwmserver:
    environment:
      - enable_mcu_api=yes
      - pipeline_forced_regexp=@conference/.*
      #- pipeline_forced_regexp=@group/.*

  kopano_kwmbridge:
    image: ${docker_repo:-zokradonh}/kopano_kwmbridge:${KWMBRIDGE_VERSION:-latest}
    read_only: true
    restart: unless-stopped
    depends_on:
      - kopano_kwmserver
    environment:
      - INSECURE=${INSECURE}
      - oidc_issuer_identifier=https://${FQDN}
      - kwm_server_urls=http://kwmserver:8778
      #- kwm_server_urls=https://${FQDNCLEANED}:8443
      - use_nat_1to1_ips=${PUBLICIP}
      - use_nat_1to1_candidate_type=host
      - ice_udp_port_range=65435:65535
    volumes:
      - /etc/machine-id:/etc/machine-id
      - /etc/machine-id:/var/lib/dbus/machine-id
      - kopanossl/:/kopano/ssl
    ports:
      - 65435:65535/udp
    tmpfs:
      - /tmp