---
version: "3.8"

services:
  web:
  image: nginx:1.21.0
  environment:
    - STACK_NAME=${STACK_NAME}
    - DOMAIN=${DOMAIN}
  configs:
    - source: nginx_conf
      target: /etc/nginx/nginx.conf
  networks:
    - proxy
    - internal
  deploy:
    update_config:
      failure_action: rollback
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.wiki.loadbalancer.server.port=80"
      - "traefik.http.routers.wiki.rule=Host(`${DOMAIN}`)"
      - "traefik.http.routers.wiki.entrypoints=web-secure"
      - "traefik.http.routers.wiki.tls.certresolver=production"

  app:
    image: "decentral1se/keycloak-collective-portal:latest"
    networks:
      - internal
    configs:
      - source: entrypoint_sh
        target: /usr/local/bin/entrypoint.sh
        mode: 0555
    entrypoint: /usr/local/bin/entrypoint.sh
    command: uvivorn --host 0.0.0.0 keycloak_collective_portal:app

networks:
  proxy:
    external: true
  internal:
    internal: true

configs:
  nginx_conf:
    name: ${STACK_NAME}_nginx_conf_${NGINX_CONF_VERSION}
    file: nginx.conf.tmpl
    template_driver: golang
  entrypoint_sh:
    name: ${STACK_NAME}_entrypoint_conf_${ENTRYPOINT_CONF_VERSION}
    file: entrypoint.sh.tmpl
    template_driver: golang