Add stack.yml

stack.yml

@@ -0,0 +1,45 @@
+version: '3.7'
+
+networks:
+  traefik:
+    external: true
+
+services:
+  sync:
+#    build: ./syncthing/
+    image: syncthing/syncthing
+#    expose:
+#      - 8384
+    hostname: sync
+    ports:
+      - "22000:22000"
+      - "21027:21027/udp"
+    volumes:
+      - "/mnt/tank/persist/nixc.us/sync/production/config:/var/syncthing/config"
+      - "/mnt/tank/persist/nixc.us/vault/production/otng:/otng"
+      - "/mnt/tank/persist/nixc.us/vault/production/data:/vault/:ro"
+      - "/mnt/tank/persist/nixc.us/vault/production/storage:/var/syncthing/storage"
+    networks:
+      - traefik
+    deploy:
+      replicas: 1
+      placement:
+        constraints:
+          - node.hostname == ingress.nixc.us
+# #          - node.role == manager
+      labels:
+        traefik.docker.network: traefik
+        traefik.enable: "true"
+        traefik.http.routers.sync.entrypoints: websecure
+        traefik.http.routers.sync.rule: Host(`sync.nixc.us`)
+        traefik.http.routers.sync.service: sync
+        traefik.http.routers.sync.tls: "true"
+        traefik.http.routers.sync.tls.certresolver: letsencryptresolver
+        traefik.http.services.sync.loadbalancer.server.port: '8384'
+        traefik.tags: traefik
+        traefik.http.routers.sync.middlewares: authelia_authelia@docker
+    logging:
+      driver: "gelf"
+      options:
+        gelf-address: "udp://log.nixc.us:15124"
+        tag: "sync_sync"