networks:
  traefik:
    external: true
  default:
    driver: overlay
services:
  whisper:
    image: git.nixc.us/nixius/whisper:production-whisper
    networks:
      - traefik
      - default
    # ports:
    #   - '80:4000'
    environment:
      SIGN_UP_DISABLED: "true"
    # volumes:
    #   - /mnt/tank/persist/nixc.us/whisper/production/data:/var/opt/whisper
    deploy:
      placement:
        constraints:
          - node.hostname == macmini14
      labels:
        homepage.group: apps
        homepage.name: whisper
        homepage.href: https://whisper.nixc.us/
        homepage.description: whisper
        traefik.enable: "true"
        traefik.http.routers.production-whisper_whisper.rule: "Host(`whisper.nixc.us`)"
        traefik.http.routers.production-whisper_whisper.entrypoints: "websecure"
        traefik.http.routers.production-whisper_whisper.tls: "true"
        traefik.http.routers.production-whisper_whisper.tls.certresolver: "letsencryptresolver"
        traefik.http.routers.production-whisper_whisper.service: "production-whisper_whisper"
        traefik.http.services.production-whisper_whisper.loadbalancer.server.port: "5173"
        traefik.docker.network: "traefik"
        traefik.http.routers.production_whisper.middlewares: 'authelia_authelia@docker'
      update_config:
        order: stop-first
        failure_action: rollback
        delay: 5s
        delay: 10s
        parallelism: 1
      restart_policy:
        condition: on-failure