version: "3.9"
services:

  samba:
    build: ./
    image: custom/samba:1.0.0
    container_name: samba
    restart: unless-stopped
    environment:
      TZ: Asia/Tokyo
      SMB_REALM: HOGESERVER.HOGEDDNS.JP
      SMB_DOMAIN: HOGEDOMAIN
      SMB_ADMINPASS: p@ssword123
      SMB_HOSTIP: ${SECONDARYIP}
      SMB_RPC_PORTS: 49152-49200
      SMB_PURPOSE: "secondary"
      SMB_USEBIND9: "false"
      RSY_PRIMARY: ${PRIMARYIP}
      RSY_PASS: p@ssword234
    volumes:
      - samba_etc:/etc/samba
      - samba_lib:/var/lib/samba
      - bind_etc:/etc/bind
      - bind_lib:/var/lib/bind
      - lam:/var/lib/ldap-account-manager
    networks:
      samba:
        ipv4_address: 172.26.0.102
    ports:
      - ${SECONDARYIP}:53:53       #DNS
      - ${SECONDARYIP}:53:53/udp   #DNS
      - ${SECONDARYIP}:135:135     #End Point Mapper(WINS)
      - ${SECONDARYIP}:137:137/udp #NetBIOS Name Service
      - ${SECONDARYIP}:138:138/udp #NetBIOS Datagram
      - ${SECONDARYIP}:139:139     #NetBIOS Session
      - ${SECONDARYIP}:445:445     #SMB over TCP
      - ${SECONDARYIP}:389:389     #LDAP
      - ${SECONDARYIP}:389:389/udp #LDAP
      - ${SECONDARYIP}:636:636     #LDAPS
      - ${SECONDARYIP}:88:88       #Kerberos
      - ${SECONDARYIP}:88:88/udp   #Kerberos
      - ${SECONDARYIP}:464:464     #Kerberos kpasswd
      - ${SECONDARYIP}:464:464/udp #Kerberos kpasswd
      - ${SECONDARYIP}:3268:3268   #Global Catalog
      - ${SECONDARYIP}:3269:3269   #Global Catalog SSL
                                   #RPC The same value as SMB_RPC_PORTS.
      - ${SECONDARYIP}:49152-49200:49152-49200
      - 8081:80 #phpLDAPadmin & LDAP Account Manager
    hostname: addc2
    dns:
      - ${PRIMARYIP}  #Used for domain to join
     #- 192.168.110.1 #Used for normal operation
    dns_search:
      - hogeserver.hogeddns.jp
    privileged: true
    devices:
      - /dev/net/tun
    cap_add:
      - NET_ADMIN

networks:
  samba:
    ipam:
      config:
        - subnet: 172.26.0.0/16
          gateway: 172.26.0.1

volumes:
  samba_etc:
  samba_lib:
  bind_etc:
  bind_lib:
  lam:
#  private:
#  sysvol: