docker-compose.yml

version: '2.2'
services:
  # Battlefield 2 1.5 server with bf2stats 2.9.4 python scripts
  bf2:
    image: startersclan/docker-bf2:v1.5.3153.0-bf2stats-2.9.4
    volumes:
      - ./config/bf2/mods/bf2/ai/aidefault-custom.ai:/server/bf2/mods/bf2/ai/aidefault.ai:ro # Customize bots
      - ./config/bf2/mods/bf2/settings/serversettings-custom.con:/server/bf2/mods/bf2/settings/serversettings.con:ro # Server config
      - ./config/bf2/mods/bf2/settings/maplist-custom-coop.con:/server/bf2/mods/bf2/settings/maplist.con:ro # Maplist
      - ./config/bf2/python/bf2/BF2StatisticsConfig-custom.py:/server/bf2/python/bf2/BF2StatisticsConfig.py:ro # bf2stats python config
    ports:
      - 16567:16567/udp
      - 29900:29900/udp
    networks:
      - gamespy-network
      - bf2-network
    extra_hosts:
      - battlefield2.available.gamespy.com:92.51.181.102 # bf2hub.com master server IP
      - battlefield2.master.gamespy.com:92.51.181.102 # bf2hub.com master server IP
      - battlefield2.ms14.gamespy.com:92.51.181.102 # bf2hub.com master server IP
      - master.gamespy.com:92.51.181.102 # bf2hub.com master server IP
      - motd.gamespy.com:92.51.181.102 # bf2hub.com master server IP
      - gpsp.gamespy.com:92.51.181.102 # bf2hub.com master server IP
      - gpcm.gamespy.com:92.51.181.102 # bf2hub.com master server IP
      - gamespy.com:92.51.181.102 # bf2hub.com master server IP
      # - bf2web.gamespy.com:192.168.1.100 # Our ASP web server IP. Use this if the ASP web server is running on a different host.
      # - gamestats.gamespy.com:192.168.1.100 # Our ASP web server IP. Use this if the ASP web server is running on a different host.
      # - eapusher.dice.se:192.168.1.100 # Our ASP web server IP. Use this if the ASP web server is running on a different host.
    depends_on:
      - asp
    restart: unless-stopped
    tty: true
    stdin_open: true

  # The reverse proxy for our web containers
  # See https://github.com/traefik/traefik/tree/v2.7/docs/content/user-guides/docker-compose for some examples for enabling HTTPS using ACME
  # You will need a domain name. E.g. 'example.com'
  traefik:
    image: traefik:v2.7
    volumes:
      # Allow traefik to listen to the Docker events
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - traefik-acme-volume:/letsencrypt
    ports:
      - 80:80
      - 443:443
      # - 8080:8080 # Uncomment to view traefik dashboard on port 8080
    networks:
      - traefik-public-network
      - traefik-network
    restart: unless-stopped
    command:
      - --global.checknewversion=false
      - --global.sendanonymoususage=false
      # - --api.insecure # Uncomment to view traefik dashboard on port 8080
      # - --log.level=DEBUG
      - --providers.docker=true
      - --providers.docker.exposedbydefault=false
      - --entrypoints.web.address=:80
      - --entrypoints.websecure.address=:443
      - --certificatesresolvers.myresolver.acme.dnschallenge=true
      - --certificatesresolvers.myresolver.acme.dnschallenge.provider=ovh
      # - --certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory
      - --certificatesresolvers.myresolver.acme.email=postmaster@example.com
      - --certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json

  # The init container that sets up permissions
  init-container:
    image: alpine:latest
    volumes:
      - db-volume:/var/lib/mysql
    entrypoint:
      - /bin/sh
    command:
      - -c
      - |
          set -eu

          echo "Granting db write permissions"
          chown -R 999:999 /var/lib/mysql

  # The gamespy ASP. The dashboard is available at https://asp.example.com/ASP
  asp:
    image: startersclan/bf2stats:2.9.4-asp
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=${COMPOSE_PROJECT_NAME?err}_traefik-network"
      # traefik v2
      # http
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-asp-gamespy-http.entrypoints=web"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-asp-gamespy-http.rule=Host(`bf2web.gamespy.com`)" # Note: `bf2web.gamespy.com` doesn't need https. The BF2 client BFHQ, and the BF2 server python files, make a HTTP requests to `bf2web.gamespy.com` with `Host: bf2web.gamespy.com`.
      # http
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-asp-http.entrypoints=web"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-asp-http.rule=Host(`asp.example.com`)"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-asp-http.middlewares=${COMPOSE_PROJECT_NAME?err}-asp-http-myRedirectScheme" # Redirect http to https
      - "traefik.http.middlewares.${COMPOSE_PROJECT_NAME?err}-asp-http-myRedirectScheme.redirectScheme.scheme=https" # Redirect http to https
      # https
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-asp.entrypoints=websecure"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-asp.tls="
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-asp.rule=Host(`asp.example.com`)"
      - "traefik.http.services.${COMPOSE_PROJECT_NAME?err}-asp.loadbalancer.server.port=80"
    environment:
      # See ./src/ASP/system/config/config.php for all supported env vars. Use comma-delimited value for array
      - DB_HOST=db
      - DB_PORT=3306
      - DB_NAME=bf2stats
      - DB_USER=admin
      - DB_PASS=admin
      - ADMIN_HOSTS=127.0.0.1,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16   # Limit admins to private IPs
      - GAME_HOSTS=127.0.0.1,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16    # Limit gameservers to private IPs
      - DEBUG_LVL=2
    volumes:
      - backups-volume:/src/ASP/system/database/backups # This volume is effectively unused since ASP doesn't allow DB backups for a remote DB, but mount it anyway to avoid errors.
      - config-volume:/src/ASP/system/config # For a stateful config file
      - logs-volume:/src/ASP/system/logs
      - snapshots-volume:/src/ASP/system/snapshots
    # ports:
    #   - 8081:80
    networks:
      traefik-network:
      bf2-network:
        aliases:
          - asp.example.com # For the ASP System Tests to resolve to itself
          - bf2web.gamespy.com # Spoof gamespy DNS for the BF2 server connected to this network
    restart: unless-stopped

  # The bf2sclone for viewing BFHQ on the web. It is available at https://bf2sclone.example.com
  bf2sclone:
    image: startersclan/bf2stats:2.9.4-bf2sclone
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=${COMPOSE_PROJECT_NAME?err}_traefik-network"
      # traefik v2
      # http
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-bf2sclone-http.entrypoints=web"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-bf2sclone-http.rule=Host(`bf2sclone.example.com`)"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-bf2sclone-http.middlewares=${COMPOSE_PROJECT_NAME?err}-bf2sclone-http-myRedirectScheme" # Redirect http to https
      - "traefik.http.middlewares.${COMPOSE_PROJECT_NAME?err}-bf2sclone-http-myRedirectScheme.redirectScheme.scheme=https" # Redirect http to https
      # https
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-bf2sclone.entrypoints=websecure"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-bf2sclone.tls="
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-bf2sclone.rule=Host(`bf2sclone.example.com`)"
      - "traefik.http.services.${COMPOSE_PROJECT_NAME?err}-bf2sclone.loadbalancer.server.port=80"
    environment:
      # See ./src/bf2sclone/config.inc.php for all supported env vars
      - DBIP=db
      - DBNAME=bf2stats
      - DBLOGIN=admin
      - DBPASSWORD=admin
      # - TITLE=BF2S Clone
      - RANKING_REFRESH_TIME=0
      # - RANKING_HIDE_BOTS=false
      # - RANKING_HIDE_HIDDEN_PLAYERS=false
      # - LEADERBOARD_COUNT=25
    volumes:
      - bf2sclone-cache-volume:/src/bf2sclone/cache
    # ports:
    #   - 8082:80
    networks:
      - traefik-network
      - bf2-network
    restart: unless-stopped

  # The DB container
  db:
    image: mariadb:10.8
    environment:
      - MARIADB_ROOT_PASSWORD=admin
      - MARIADB_USER=admin
      - MARIADB_PASSWORD=admin
      - MARIADB_DATABASE=bf2stats
    volumes:
      - ./config/db/my.cnf:/etc/my.cnf:ro # Config file. Customize as needed
      - db-volume:/var/lib/mysql
    networks:
      - bf2-network
    depends_on:
      - init-container
    restart: unless-stopped

  # The phpmyadmin interface for administrating the DB. It is available at https://phpmyadmin.example.com
  phpmyadmin:
    image: phpmyadmin:5.2
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=${COMPOSE_PROJECT_NAME?err}_traefik-network"
      # traefik v2
      # http
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-phpmyadmin-http.entrypoints=web"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-phpmyadmin-http.rule=Host(`phpmyadmin.example.com`)"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-phpmyadmin-http.middlewares=${COMPOSE_PROJECT_NAME?err}-phpmyadmin-http-myRedirectScheme" # Redirect http to https
      - "traefik.http.middlewares.${COMPOSE_PROJECT_NAME?err}-phpmyadmin-http-myRedirectScheme.redirectScheme.scheme=https" # Redirect http to https
      # https
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-phpmyadmin.entrypoints=websecure"
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-phpmyadmin.tls="
      - "traefik.http.routers.${COMPOSE_PROJECT_NAME?err}-phpmyadmin.rule=Host(`phpmyadmin.example.com`)"
      - "traefik.http.services.${COMPOSE_PROJECT_NAME?err}-phpmyadmin.loadbalancer.server.port=80"
    environment:
      - PMA_ABSOLUTE_URI=https://phpmyadmin.example.com # Enable this if behind a reverse proxy
      - PMA_HOST=db
    # ports:
    #   - 8083:80
    networks:
      - traefik-network
      - bf2-network
    restart: unless-stopped

networks:
  gamespy-network:
  bf2-network:
  traefik-public-network:
  traefik-network:
    internal: true

volumes:
  prmasterserver-volume:
  traefik-acme-volume:
  backups-volume:
  config-volume:
  logs-volume:
  snapshots-volume:
  bf2sclone-cache-volume:
  db-volume: