version: '3.9'

services:
  # Wordpress
  wordpress:
    image: wordpress:fpm
    container_name: wordpress
    profiles:
      - wordpress
    restart: on-failure
    depends_on:
      - wordpress_db
      - caddy
    env_file:
      - env/wordpress.env
    volumes:
      - ./config/wordpress/php.ini:/usr/local/etc/php/conf.d/custom.ini:ro
      - wordpress:/var/www/html:rw
    networks:
      - infra-network
    security_opt:
      - no-new-privileges:true

  # Database wordpress
  wordpress_db:
    image: mariadb:latest
    container_name: wordpress_db
    profiles:
      - database
      - wordpress
    depends_on:
      - caddy
    restart: on-failure
    volumes:
      - wordpress_db:/var/lib/mysql:rw
    env_file:
      - env/wordpress_db.env
    command: '--default-authentication-plugin=mysql_native_password'
    networks:
      - infra-network
    security_opt:
      - no-new-privileges:true

volumes:
  wordpress_db:
    name: wordpress_db
  wordpress:
    name: wordpress