# build 0
version: '3.7'

networks:
  traefik:
    external: true

services:
  sync:
#    build: ./syncthing/
    image: syncthing/syncthing
#    expose:
#      - 8384
    hostname: sync
    ports:
      - "22000:22000"
      - "21027:21027/udp"
    volumes:
      - "/mnt/tank/persist/nixc.us/sync/production/config:/var/syncthing/config"
      - "/mnt/tank/persist/nixc.us/vault/production/otng:/otng"
      - "/mnt/tank/persist/nixc.us/vault/production/data:/vault/:ro"
      - "/mnt/tank/persist/nixc.us/vault/production/storage:/var/syncthing/storage"
    networks:
      - traefik
    deploy:
      replicas: 1
      placement:
        constraints:
          - node.hostname == ingress.nixc.us
      labels:
        traefik.docker.network: traefik
        traefik.enable: "true"
        traefik.http.routers.sync.entrypoints: websecure
        traefik.http.routers.sync.rule: Host(`sync.nixc.us`)
        traefik.http.routers.sync.service: sync
        traefik.http.routers.sync.tls: "true"
        traefik.http.routers.sync.tls.certresolver: letsencryptresolver
        traefik.http.services.sync.loadbalancer.server.port: '8384'
        traefik.tags: traefik
        traefik.http.routers.sync.middlewares: authelia_authelia@docker
    # logging:
    #   driver: "gelf"
    #   options:
    #     gelf-address: "udp://log.nixc.us:15124"
    #     tag: "sync_sync"