networks:
  traefik:
    external: true

services:
  n8n:
    image: git.nixc.us/colin/n8n:production
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure
        max_attempts: 3
      update_config:
        parallelism: 1
        delay: 10s
        order: start-first
      rollback_config:
        parallelism: 1
        delay: 10s
        order: stop-first
    networks:
      - traefik
    environment:
      - N8N_HOST=${N8N_HOST:-n8n.nixc.us}
      - N8N_PORT=5678
      - N8N_PROTOCOL=${N8N_PROTOCOL:-https}
      - NODE_ENV=production
    volumes:
      - n8n_data:/home/node/.n8n
    labels:
      - traefik.enable=true
      - traefik.http.routers.production_n8n.rule=Host(n8n.nixc.us)
      - traefik.http.routers.production_n8n.entrypoints=websecure
      - traefik.http.routers.production_n8n.tls=true
      - traefik.http.routers.production_n8n.tls.certresolver=letsencryptresolver
      - traefik.http.services.production_n8n.loadbalancer.server.port=5678
      - traefik.http.routers.production_n8n.middlewares=secure-headers

volumes:
  n8n_data:
    driver: local