wordpress/docker-compose.production.yml

---
version: "3.7"

services:
  wordpress:
    ports:
      - "8030:80"
    volumes:
      - "wp:/var/www/html"
    networks:
      - proxy
    environment:
      - WORDPRESS_DB_HOST=mariadb
      - WORDPRESS_DB_USER=wordpress
      - WORDPRESS_DB_PASSWORD_FILE=/run/secrets/wp-db-passwd-v1
      - WORDPRESS_DB_NAME=wordpress
    secrets:
      - wp-db-passwd-v1
    deploy:
      mode: replicated
      replicas: 1
      update_config:
        failure_action: rollback
      placement:
        constraints:
          - node.role == manager
      labels:
        - "traefik.enable=true"
        - "traefik.http.services.wordpress.loadbalancer.server.port=8030"
        - "traefik.http.routers.wordpress.rule=Host(`wp.swarm.autonomic.zone`)"
        - "traefik.http.routers.wordpress.entrypoints=web-secure"
        - "traefik.http.routers.wordpress.tls.certresolver=staging"

  mariadb:
    volumes:
      - "db:/var/lib/mysql"
    environment:
      - MYSQL_ROOT_PASSWORD_FILE=/run/secrets/mysql-root-passwd-v1
      - MYSQL_DATABASE=wordpress
      - MYSQL_USER=wordpress
      - MYSQL_PASSWORD_FILE=/run/secrets/mysql-user-passwd-v1
    secrets:
      - mysql-root-passwd-v1
      - mysql-user-passwd-v1

networks:
  proxy:
    external: true

volumes:
  db:
  wp:

secrets:
  wp-db-passwd-v1:
    external: true
  mysql-root-passwd-v1:
    external: true
  mysql-user-passwd-v1:
    external: true