version: "3.8"
services:
  ssh:
    image: lscr.io/linuxserver/openssh-server:latest
    networks:
      - proxy
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - PASSWORD_ACCESS=true
      - USER_PASSWORD_FILE=/run/secrets/ssh_password
      - USER_NAME=sftp
    secrets:
      - ssh_password
    volumes:
      - content:/content
    ports:
      - 2220:2222
    deploy:
      restart_policy:
        condition: on-failure

secrets:
  ssh_password:
    external: true
    name: ${STACK_NAME}_ssh_password_${SECRET_SSH_PASSWORD_VERSION}

volumes:
  content:

networks:
  proxy:
    external: true