services:
  redis:
    image: redis:alpine
    volumes:
      - redis_data:/data
    networks:
      - default
    deploy:
      placement:
        constraints:
          - node.hostname == macmini3
      replicas: 1
      restart_policy:
        condition: on-failure

  haste:
    build:
      context: .
      dockerfile: Dockerfile
    volumes:
      - public_system:/app/public/system
    environment:
      - NODE_ENV=production
      - HASTEBIN_ENABLE_CSP=true
      - HASTEBIN_ENABLE_HSTS=true
      - HASTEBIN_ALLOW_UNSAFE_HASHES=true
      - HASTEBIN_SCRIPT_SOURCES=
      - HASTEBIN_BYPASS_CSP_IN_DEV=false
      - HASTEBIN_ENABLE_CROSS_ORIGIN_ISOLATION=true
    networks:
      - traefik
      - default
    deploy:
      placement:
        constraints:
          - node.hostname == macmini3
      labels:
        homepage.group: apps
        homepage.name: HasteBin
        homepage.href: https://haste.nixc.us/
        homepage.description: HasteBin
        us.nixc.autodeploy: "true"
        traefik.enable: "true"
        traefik.http.routers.production-haste_haste.rule: "Host(`haste.nixc.us`)"
        traefik.http.routers.production-haste_haste.entrypoints: "websecure"
        traefik.http.routers.production-haste_haste.tls: "true"
        traefik.http.routers.production-haste_haste.tls.certresolver: "letsencryptresolver"
        traefik.http.routers.production-haste_haste.service: "production-haste_haste"
        traefik.http.services.production-haste_haste.loadbalancer.server.port: "7777"
        traefik.docker.network: "traefik"

      replicas: 1
      restart_policy:
        condition: on-failure

networks:
  traefik:
    external: true
  default:
    driver: overlay

volumes:
  public_system:
    driver: local
  redis_data:
    driver: local