feat: use host bind mounts for persistent data

docker-compose.yml

@@ -12,7 +12,11 @@ services:
     entrypoint: ["/bin/sh", "/usr/local/bin/check-environment.sh"]
     command: ["mariadbd"]
     volumes:
-      - db_data:/var/lib/mysql
+      - type: bind
+        source: ${DB_DATA_PATH:-./runtime/db}
+        target: /var/lib/mysql
+        bind:
+          create_host_path: true
       - ./db/check-environment.sh:/usr/local/bin/check-environment.sh:ro
     networks:
       - data
@@ -55,7 +59,11 @@ services:
             define('DISALLOW_FILE_MODS', true);
         }
     volumes:
-      - wordpress_data:/var/www/html
+      - type: bind
+        source: ${WORDPRESS_DATA_PATH:-./runtime/wordpress}
+        target: /var/www/html
+        bind:
+          create_host_path: true
     networks:
       - web
       - data
@@ -85,8 +93,18 @@ services:
       TLS_RELOAD_INTERVAL_SECONDS: ${TLS_RELOAD_INTERVAL_SECONDS:-30}
       TRUST_PROXY_HEADERS: ${TRUST_PROXY_HEADERS:-0}
     volumes:
-      - letsencrypt_data:/etc/letsencrypt:ro
-      - certbot_challenges:/var/www/certbot:ro
+      - type: bind
+        source: ${LETSENCRYPT_DATA_PATH:-./runtime/letsencrypt}
+        target: /etc/letsencrypt
+        read_only: true
+        bind:
+          create_host_path: true
+      - type: bind
+        source: ${CERTBOT_CHALLENGES_PATH:-./runtime/certbot/www}
+        target: /var/www/certbot
+        read_only: true
+        bind:
+          create_host_path: true
     networks:
       - web
     ports:
@@ -119,8 +137,16 @@ services:
     entrypoint: ["/bin/sh", "/opt/certbot/renew.sh"]
     volumes:
       - ./certbot/renew.sh:/opt/certbot/renew.sh:ro
-      - letsencrypt_data:/etc/letsencrypt
-      - certbot_challenges:/var/www/certbot
+      - type: bind
+        source: ${LETSENCRYPT_DATA_PATH:-./runtime/letsencrypt}
+        target: /etc/letsencrypt
+        bind:
+          create_host_path: true
+      - type: bind
+        source: ${CERTBOT_CHALLENGES_PATH:-./runtime/certbot/www}
+        target: /var/www/certbot
+        bind:
+          create_host_path: true
     tmpfs:
       - /tmp
       - /var/lib/letsencrypt
@@ -159,7 +185,11 @@ services:
     entrypoint: ["/bin/sh"]
     command: ["/scripts/bootstrap.sh"]
     volumes:
-      - wordpress_data:/var/www/html
+      - type: bind
+        source: ${WORDPRESS_DATA_PATH:-./runtime/wordpress}
+        target: /var/www/html
+        bind:
+          create_host_path: true
       - ./wp-cli/bootstrap.sh:/scripts/bootstrap.sh:ro
     networks:
       - data
@@ -175,12 +205,6 @@ services:
       - ALL
     pids_limit: 100
 
-volumes:
-  db_data:
-  wordpress_data:
-  letsencrypt_data:
-  certbot_challenges:
-
 networks:
   web:
   data: