networks:
  traefik:
    external: true

services:
  webdav:
    image: git.nixc.us/nixius/webdav:production
    volumes:
      - "/mnt/nvme/persist/nixc.us/ownfoil/production/data/:/var/lib/dav"
    environment:
      AUTH_TYPE: Basic
      USERNAME: 3sWgHNUq4DexGAeY7x3NZR6qjjg75iNY3
      PASSWORD: htFyxQacTgknFjyKFr6SZdjnQD4KjfgGb
# this seems to disable authenticated writes.
#      ANONYMOUS_METHODS: GET,OPTIONS,PROPFIND
    deploy:
      replicas: 1
      placement:
        constraints:
        - node.hostname == macmini1
      labels:
        homepage.group: apps
        homepage.name: webdav
        homepage.href: https://webdav.nixc.us/
        homepage.description:
        us.nixc.autodeploy: "true"
        traefik.enable: "true"
        traefik.http.routers.production_webdav_webdav.tls: "true"
        traefik.http.services.production_webdav_webdav.loadbalancer.server.port: 80
        traefik.http.routers.production_webdav_webdav.rule: Host(`webdav.nixc.us`)
        traefik.http.routers.production_webdav_webdav.entrypoints: websecure
        traefik.http.routers.production_webdav_webdav.tls.certresolver: letsencryptresolver
        traefik.http.routers.production_webdav_webdav.service: production_webdav_webdav
        traefik.docker.network: traefik
#        - 'traefik.http.routers.production_uptime_uptime.middlewares=authelia@docker'
    networks:
      - traefik