From e860d419d18f0a33939aa2e9f16c152db6d59fa2 Mon Sep 17 00:00:00 2001
From: colin <colin@noreply@nixc.us>
Date: Sun, 21 Jan 2024 20:37:21 +0000
Subject: [PATCH] Add stack.production.yml

---
 stack.production.yml | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 stack.production.yml

diff --git a/stack.production.yml b/stack.production.yml
new file mode 100644
index 0000000..0f5e30e
--- /dev/null
+++ b/stack.production.yml
@@ -0,0 +1,33 @@
+version: '3.8'
+
+services:
+  headscale:
+    image: git.nixc.us/colin/headscale:production
+    # volumes:
+    #   - public_system:/headscale/public/system
+    networks:
+      - traefik
+    deploy:
+      placement:
+        constraints:
+          - node.hostname == macmini3
+      labels:
+        us.nixc.autodeploy: "true"
+        traefik.enable: "true"
+        traefik.http.routers.production-headscale_headscale.rule: "Host(`headscale.nixc.us`)"
+        traefik.http.routers.production-headscale_headscale.entrypoints: "websecure"
+        traefik.http.routers.production-headscale_headscale.tls: "true"
+        traefik.http.routers.production-headscale_headscale.tls.certresolver: "letsencryptresolver"
+        traefik.http.routers.production-headscale_headscale.service: "production-headscale_headscale"
+        traefik.http.services.production-headscale_headscale.loadbalancer.server.port: "8080"
+        traefik.docker.network: "traefik"
+
+      replicas: 1
+      restart_policy:
+        condition: on-failure
+
+networks:
+  traefik:
+    external: true
+  default:
+    driver: overlay
\ No newline at end of file