version: "3.7"

networks:
  traefik:
    external: true 

services:
  top:
#    image: lscr.io/linuxserver/webtop:ubuntu-kde
    # image: codeberg.org/dowerent/ubuntu-webtop:latest
    image: git.nixc.us/colin/top:production
    environment:
      TZ: America/New_York
    networks:
      - traefik
    dns:
      - 8.8.8.8
      - 4.4.4.4
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /mnt/tank/persist/nixc.us/top/production/config:/config
    deploy:
      placement:
        constraints:
          # - node.labels.role == db
          - node.hostname == macmini14
#          - node.labels.mac-rack == true
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.top.tls=true"
        - "traefik.http.services.top.loadbalancer.server.port=3000"
        - "traefik.http.routers.top.rule=Host(`top.nixc.us`)"
        - "traefik.http.routers.top.entrypoints=websecure"
        - "traefik.http.routers.top.tls.certresolver=letsencryptresolver"
        - "traefik.http.routers.top.service=top"
        - "traefik.docker.network=traefik"
        - 'traefik.http.routers.top.middlewares=authelia_authelia@docker'
      update_config:
        order: start-first
        failure_action: rollback
        delay: 5s
        delay: 10s
        parallelism: 1
      restart_policy:
        condition: on-failure