version: '3.7'

networks:
  traefik:
    external: true

services:
  remmina:
    image: git.nixc.us/colin/remmina:production
    environment:
      - PUID=1000
      - PGID=1000
      # - REMMINA_PASSWORD=your_password
      - REMMINA_PORT=5900
    # volumes:
    #   - "/mnt/tank/persist/nixc.us/remmina/config:/config"
    #   - "/mnt/tank/persist/nixc.us/vault/production/data:/data:ro"
    networks:
      - traefik
    deploy:
      replicas: 1
      placement:
        constraints:
          - node.hostname == ingress.nixc.us
      labels:
        traefik.docker.network: traefik
        traefik.enable: "true"
        traefik.http.routers.production_remmina.entrypoints: websecure
        traefik.http.routers.production_remmina.rule: Host(`remmina.nixc.us`)
        traefik.http.routers.production_remmina.service: production_remmina
        traefik.http.routers.production_remmina.tls: "true"
        traefik.http.routers.production_remmina.tls.certresolver: letsencryptresolver
        traefik.http.services.production_remmina.loadbalancer.server.port: '5900'
        traefik.tags: traefik
        traefik.http.routers.production_remmina.middlewares: authelia_authelia@docker