Add stack.production.yml

stack.production.yml

@@ -0,0 +1,33 @@
+version: '3.8'
+
+services:
+  headscale:
+    image: git.nixc.us/colin/headscale:production
+    # volumes:
+    #   - public_system:/headscale/public/system
+    networks:
+      - traefik
+    deploy:
+      placement:
+        constraints:
+          - node.hostname == macmini3
+      labels:
+        us.nixc.autodeploy: "true"
+        traefik.enable: "true"
+        traefik.http.routers.production-headscale_headscale.rule: "Host(`headscale.nixc.us`)"
+        traefik.http.routers.production-headscale_headscale.entrypoints: "websecure"
+        traefik.http.routers.production-headscale_headscale.tls: "true"
+        traefik.http.routers.production-headscale_headscale.tls.certresolver: "letsencryptresolver"
+        traefik.http.routers.production-headscale_headscale.service: "production-headscale_headscale"
+        traefik.http.services.production-headscale_headscale.loadbalancer.server.port: "8080"
+        traefik.docker.network: "traefik"
+
+      replicas: 1
+      restart_policy:
+        condition: on-failure
+
+networks:
+  traefik:
+    external: true
+  default:
+    driver: overlay