docker-compose.yml

# mytunneld (edge :3000 + control :9000) + nginx on :80 for subdomain-friendly HTTP.
#
# Usage:
#   docker compose up -d --build
#
# EC2 security group: TCP 80, 443 (nginx), TCP 9000 (tunnel clients).
# Point DNS: *.yourdomain.com → EC2 IP (or use Host header with curl for tests).

services:
  mytunneld:
    build:
      context: .
      dockerfile: Dockerfile
      args:
        GO_VERSION: ${GO_VERSION:-1.25}
    image: mytunneld:latest
    container_name: mytunneld
    restart: unless-stopped
    expose:
      - "3000"
    ports:
      - "9000:9000"
    networks:
      - tunnel

  nginx:
    image: nginx:1.27-alpine
    container_name: mytunneld-nginx
    restart: unless-stopped
    depends_on:
      - mytunneld
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
      - ./nginx/ssl:/etc/nginx/ssl:ro
      - ./nginx/certbot:/var/www/certbot:ro
    networks:
      - tunnel

networks:
  tunnel:
    name: devtunnel