docker-compose.yml

services:
  gophish-proxy:
    container_name: gophish-proxy
    image: caddy:latest
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CAP_NET_BIND_SERVICE
      - CAP_NET_RAW
    restart: unless-stopped
    networks:
      - gophish
    volumes:
      - ./caddy:/etc/caddy
    ports:
      - "0.0.0.0:80:80"
      - "0.0.0.0:443:443"
      - "0.0.0.0:3344:3344"

  mariadb:
    container_name: mariadb
    image: mariadb:latest
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - CAP_DAC_OVERRIDE
      - CAP_SETGID
      - CAP_SETUID
    restart: always
    networks:
      - db
    volumes:
      - mariadb:/var/lib/mysql
    environment:
      MARIADB_RANDOM_ROOT_PASSWORD: true
      MARIADB_USER: ${MYSQL_USER}
      MARIADB_PASSWORD: ${MYSQL_PASSWORD}
      MARIADB_DATABASE: ${MYSQL_DATABASE}
    expose:
      - 3306

  gophish:
    container_name: gophish
    build: .
    cap_drop:
      - ALL
    cap_add:
      - CAP_DAC_OVERRIDE
      - CAP_NET_RAW
      - CAP_NET_BIND_SERVICE
    security_opt:
      - no-new-privileges:true
    ports:
      - "3345:3344"
      - "8080:80"
      - "8443:8443"
    environment:
      ADMIN_LISTEN_URL: 0.0.0.0:3344
      ADMIN_USE_TLS: false
      DB_NAME: mysql
      DB_FILE_PATH: ${MYSQL_USER}:${MYSQL_PASSWORD}@(mariadb:3306)/${MYSQL_DATABASE}?charset=utf8&parseTime=True&loc=UTC
    restart: unless-stopped
    networks:
      - db
      - gophish
    depends_on:
      - mariadb
      - gophish-proxy

networks:
  db:
  gophish:

volumes:
  mariadb: