services:
  cert-gen:
    image: ras-certgen:latest
    volumes:
      - ./certs:/work/certs
    working_dir: /work/certs
    entrypoint: [ "/bin/sh", "-c" ]
    environment:
      - OSCAR_HOST=${OSCAR_HOST}
    command:
      - "openssl req -x509 -newkey rsa:1024
         -keyout key.pem
         -out cert.pem
         -sha256 -days 365 -nodes
         -subj \"/CN=${OSCAR_HOST}\"
         && cat cert.pem key.pem > server.pem
         && rm cert.pem key.pem"

  nss-gen:
    image: ras-certgen:latest
    volumes:
      - ./certs:/work/certs
    working_dir: /work/certs
    entrypoint: [ "/bin/sh", "-c" ]
    command:
      - "rm -rf nss
         && mkdir -p nss
         && certutil -N -d nss --empty-password
         && certutil -A -n \"RAS\" -t \"CT,,C\" -i server.pem -d nss"

  open-oscar-server:
    image: ras:latest
    ports:
      - "5190:5190"
      - "8080:8080"
      - "9898:9898"
      - "1088:1088"
      - "4000:4000/udp"
    env_file:
      - ./config/ssl/settings.env
    volumes:
      - .:/project
    working_dir: /project

  stunnel:
    image: ras-stunnel:5.75-openssl-1.0.2u
    ports:
      - "443:443"
      - "5193:5193"
    volumes:
      - ./config/ssl/stunnel.conf:/etc/stunnel/stunnel.conf:ro
      - ./certs:/etc/stunnel/certs:ro
    command: stunnel.conf