docker-compose.yml

name: sip-proxy

networks:
  sip:
    driver: bridge

services:
  mysql:
    image: mariadb:11
    container_name: sipproxy-mysql
    environment:
      MARIADB_ROOT_PASSWORD: kamailio
      MARIADB_DATABASE: kamailio
      MARIADB_USER: kamailio
      MARIADB_PASSWORD: kamailio
    volumes:
      - ./mysql/init:/docker-entrypoint-initdb.d:ro
      - mysql-data:/var/lib/mysql
    networks: [sip]
    healthcheck:
      test: ["CMD", "mariadb-admin", "ping", "-h", "localhost", "-pkamailio"]
      interval: 5s
      timeout: 3s
      retries: 20

  postgres:
    image: postgres:15
    container_name: sipproxy-postgres
    environment:
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: postgres
    volumes:
      - ./homer/postgres-init:/docker-entrypoint-initdb.d:ro
      - postgres-data:/var/lib/postgresql/data
    networks: [sip]
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U postgres"]
      interval: 5s
      timeout: 3s
      retries: 20

  heplify-server:
    image: sipcapture/heplify-server:latest
    container_name: sipproxy-heplify
    depends_on:
      postgres:
        condition: service_healthy
    volumes:
      - ./homer/heplify/heplify-server.toml:/etc/heplify-server.toml:ro
    command: ["./heplify-server", "--config", "/etc/heplify-server.toml"]
    networks: [sip]
    ports:
      - "9060:9060/udp"

  homer-webapp:
    image: sipcapture/webapp:latest
    container_name: sipproxy-homer
    depends_on:
      postgres:
        condition: service_healthy
    environment:
      DB_HOST: postgres
      DB_USER: homer
      DB_PASS: homer
      DB_CONF_NAME: homer_config
      DB_DATA_NAME: homer_data
    ports:
      - "9080:80"
    networks: [sip]

  asterisk:
    build: ./asterisk
    container_name: sipproxy-asterisk
    networks: [sip]
    ports:
      - "10000-10100:10000-10100/udp"
    depends_on:
      - heplify-server
    volumes:
      - ./.env:/etc/asterisk/.env:ro

  kamailio:
    build: ./kamailio
    container_name: sipproxy-kamailio
    networks: [sip]
    ports:
      - "5060:5060/udp"
      - "5060:5060/tcp"
    depends_on:
      mysql:
        condition: service_healthy
      asterisk:
        condition: service_started
      heplify-server:
        condition: service_started
    environment:
      DB_URL: "mysql://kamailio:kamailio@mysql/kamailio"
      MEDIA_ADDR: "asterisk:5060"
      HEP_ADDR: "heplify-server:9060"
      ITSP_PROXY: ${ITSP_PROXY:-}
    volumes:
      - kamailio-logs:/var/log/kamailio

  fail2ban:
    profiles: ["prod"]
    image: crazymax/fail2ban:latest
    container_name: sipproxy-fail2ban
    network_mode: host
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
      - NET_RAW
    environment:
      TZ: UTC
      F2B_LOG_LEVEL: INFO
    volumes:
      - kamailio-logs:/var/log/kamailio:ro
      - ./fail2ban/data:/data

  caddy:
    profiles: ["prod"]
    image: caddy:2
    container_name: sipproxy-caddy
    networks: [sip]
    restart: unless-stopped
    ports:
      - "80:80"
      - "443:443"
    environment:
      PANEL_HOSTNAME: ${PANEL_HOSTNAME:-panel.example.com}
      ACME_EMAIL: ${ACME_EMAIL:-}
    volumes:
      - ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro
      - caddy-data:/data
      - caddy-config:/config
    depends_on:
      - panel-web

  panel-api:
    build: ./panel/api
    container_name: sipproxy-panel-api
    networks: [sip]
    depends_on:
      mysql: { condition: service_healthy }
      postgres: { condition: service_healthy }
    environment:
      ADMIN_USER: "${ADMIN_USER:-admin}"
      PANEL_DEV: "${PANEL_DEV:-false}"
      KAMAILIO_DB_URL: "mysql+pymysql://kamailio:kamailio@mysql/kamailio"
      HOMER_DB_URL: "postgresql+psycopg://homer:homer@postgres/homer_data"
      MEDIA_CONTAINER: "sipproxy-asterisk"
      KAMAILIO_CONTAINER: "sipproxy-kamailio"
      ENV_FILE_PATH: "/repo/.env"
      DID_MAP_PATH: "/repo/kamailio/did_map.lua"
    volumes:
      - .:/repo
      - /var/run/docker.sock:/var/run/docker.sock
    secrets:
      - admin_hash
      - jwt_secret

  panel-web:
    build: ./panel/web
    container_name: sipproxy-panel
    depends_on: [panel-api]
    networks: [sip]
    ports:
      - "${PANEL_HTTP_PORT:-8080}:80"

volumes:
  mysql-data:
  postgres-data:
  kamailio-logs:
  caddy-data:
  caddy-config:

secrets:
  admin_hash:
    file: ./panel/admin.hash
  jwt_secret:
    file: ./panel/jwt.secret