docker-compose.yml

version: '3'

# volumes
volumes:
  mariadb-data:
    driver: local

# networks
networks:
  internal:
    driver: bridge

#services
services:

  # app
  project-app:
    image: webdevops/php-apache:7.3
    container_name: project-app
    restart: always
    networks:
      - internal
    working_dir: /var/www/app
    volumes:
      - .:/var/www/app
      - /etc/letsencrypt/live/project.com/cert.pem:/opt/docker/etc/httpd/ssl/server.crt
      - /etc/letsencrypt/live/project.com/fullchain.pem:/opt/docker/etc/httpd/ssl/server.csr
      - /etc/letsencrypt/live/project.com/privkey.pem:/opt/docker/etc/httpd/ssl/server.key
    environment:
      - WEB_DOCUMENT_ROOT=/var/www/app/public
    ports:
     - 80:80
     - 443:443

  # database service
  project-database:
    container_name: project-database
    image: mariadb:10.4
    restart: unless-stopped
    networks:
      - internal
    environment:
      - MYSQL_ROOT_PASSWORD=root
      - MYSQL_DATABASE=project
      - MYSQL_USER=user
      - MYSQL_PASSWORD=password
    volumes:
      - mariadb-data:/var/lib/mysql
      - .:/var/www/app

letsencrypt-issue.sh

#!/bin/bash

docker run -ti --rm \
	-v /etc/letsencrypt:/etc/letsencrypt \
        -v /var/projects/app/public:/var/www \
        webdevops/certbot /usr/bin/certbot certonly \
	--agree-tos \
	--webroot \
	-w /var/www \
	-d project.com \
	-m "[email protected]"

letsencrypt-reissue.sh

#!/bin/sh

set -euo pipefail
# Certificate reissue

docker run -ti --rm \
    -v /etc/letsencrypt:/etc/letsencrypt \
    -v /var/projects/app/public:/var/www \
    webdevops/certbot /usr/bin/certbot renew