networks:
  traefik:
    external: true
  default:
    driver: overlay
services:
  asciinema:
    image: git.nixc.us/nixius/asciinema:production-asciinema
    networks:
      - traefik
      - default
    # ports:
    #   - '80:4000'
    environment:
      SECRET_KEY_BASE: "MSDkdc9ZI5ar3VC3eOhRp3xWxiIQkEi3LR1UYNtU7NUAJeERhMVSvb0E4b5ODyCW"
      URL_HOST: "asciinema.nixc.us"
      URL_PORT: "443"
      SMTP_HOST: "box.p.nixc.us"
      SMTP_PORT: "465"
      SMTP_USERNAME: "asciinema@nixc.us"
      SMTP_PASSWORD: "DiHcwSup8RSo66LgEzGi7R4PBWsDyFgxn"
    volumes:
      - /mnt/tank/persist/nixc.us/asciinema/production/data:/var/opt/asciinema
    deploy:
      placement:
        constraints:
          - node.hostname == macmini14
      labels:
        homepage.group: apps
        homepage.name: asciinema
        homepage.href: https://asciinema.nixc.us/
        homepage.description: asciinema
        traefik.enable: "true"
        traefik.http.routers.production-asciinema_asciinema.rule: "Host(`asciinema.nixc.us`)"
        traefik.http.routers.production-asciinema_asciinema.entrypoints: "websecure"
        traefik.http.routers.production-asciinema_asciinema.tls: "true"
        traefik.http.routers.production-asciinema_asciinema.tls.certresolver: "letsencryptresolver"
        traefik.http.routers.production-asciinema_asciinema.service: "production-asciinema_asciinema"
        traefik.http.services.production-asciinema_asciinema.loadbalancer.server.port: "4000"
        traefik.docker.network: "traefik"
        # traefik.http.routers.production_asciinema.middlewares: 'authelia_authelia@docker'
      update_config:
        order: stop-first
        failure_action: rollback
        delay: 5s
        delay: 10s
        parallelism: 1
      restart_policy:
        condition: on-failure

  postgres:
    image: git.nixc.us/nixius/asciinema:production-postgres
    networks:
      - default
    environment:
      - POSTGRES_HOST_AUTH_METHOD=trust
    volumes:
      - /mnt/tank/persist/nixc.us/asciinema/production/db:/var/lib/postgresql/data
    healthcheck:
      test: ['CMD-SHELL', 'pg_isready -U postgres']
      interval: 2s
      timeout: 5s
      retries: 10
    deploy:
      placement:
        constraints:
          - node.hostname == macmini14
      labels:
        traefik.enable: "false"
      update_config:
        order: stop-first
        failure_action: rollback
        delay: 5s
        delay: 10s
        parallelism: 1
      restart_policy:
        condition: on-failure