version: "3.9"

networks:
  traefik:
    external: true

services:
  unifi:
    image: codeberg.org/iridium-net/lan-to-nginx:latest
    environment:
      - BACKEND_ADDRESS=192.168.8.1
      - BACKEND_PORT=443
      - PROTOCOL=https
    networks:
      - traefik
    deploy:
      replicas: 1
      placement:
        constraints:
          - node.hostname == macmini7
      labels:
        - "us.nixc.autodeploy=true"
        - "traefik.enable=true"
        - "traefik.http.routers.nginx-proxy.tls=true"
        - "traefik.http.services.nginx-proxy.loadbalancer.server.port=80"
        - "traefik.http.routers.nginx-proxy.rule=Host(`unifi.nixc.us`)"
        - "traefik.http.routers.nginx-proxy.entrypoints=websecure"
        - "traefik.http.routers.nginx-proxy.tls.certresolver=letsencryptresolver"
        - "traefik.http.routers.nginx-proxy.service=nginx-proxy"
        - "traefik.docker.network=traefik"