version: "3.7"

networks:
  traefik:
    external: true 

services:
  top:
#    image: lscr.io/linuxserver/webtop:ubuntu-kde
    # image: codeberg.org/dowerent/ubuntu-webtop:latest
    image: git.nixc.us/colin/top:production
    environment:
      TZ: America/New_York
    networks:
      - traefik
    dns:
      - 8.8.8.8
      - 4.4.4.4
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /mnt/tank/persist/nixc.us/top/production/config:/config
    deploy:
      placement:
        constraints:
          # - node.labels.role == db
          - node.hostname == macmini14
#          - node.labels.mac-rack == true
      labels:
        homepage.group: apps
        homepage.name: Webtop
        homepage.href: https://top.nixc.us/
        homepage.description: Webtop
        traefik.enable: "true"
        traefik.http.routers.top.tls: "true"
        traefik.http.services.top.loadbalancer.server.port: 3000
        traefik.http.routers.top.rule: Host(`top.nixc.us`)
        traefik.http.routers.top.entrypoints: websecure
        traefik.http.routers.top.tls.certresolver: letsencryptresolver
        traefik.http.routers.top.service: top
        traefik.docker.network: traefik
        traefik.http.routers.top.middlewares: 'authelia_authelia@docker'
      update_config:
        order: start-first
        failure_action: rollback
        delay: 5s
        delay: 10s
        parallelism: 1
      restart_policy:
        condition: on-failure