version: '3.5'

networks:
  reverse-proxy:
    external:
      name: reverse-proxy

volumes:
  redis-trash1:

services:
  web:
    depends_on:
      - db
      - redis
    env_file: nopaque.env
    image: gitlab.ub.uni-bielefeld.de:4567/sfb1288inf/opaque:development
    labels:
      - "traefik.docker.network=reverse-proxy"
      - "traefik.enable=true"
      ### <http> ###
      - "traefik.http.middlewares.nopaque-header.headers.customrequestheaders.X-Forwarded-Proto=http"
      - "traefik.http.routers.nopaque.entrypoints=web"
      - "traefik.http.routers.nopaque.middlewares=nopaque-header, redirect-to-https@file"
      - "traefik.http.routers.nopaque.rule=Host(`nopaque.localhost`)"  # Change this to match your nopaque domain
      ### </http> ###
      ### <https> ###
      - "traefik.http.middlewares.nopaque-secure-header.headers.customrequestheaders.X-Forwarded-Proto=https"
      - "traefik.http.routers.nopaque-secure.entrypoints=web-secure"
      - "traefik.http.routers.nopaque-secure.middlewares=hsts-header@file, nopaque-secure-header"
      - "traefik.http.routers.nopaque-secure.rule=Host(`nopaque.localhost`)"  # Change this to match your nopaque domain
      - "traefik.http.routers.nopaque-secure.tls.options=intermediate@file"
      ### </https> ###
      ### <basicauth help="https://docs.traefik.io/middlewares/basicauth/"> ###
      # - "traefik.http.middlewares.nopaque-basicauth.basicauth.users=name:hashed-password"
      # - "traefik.http.routers.nopaque.middlewares=nopaque-basicauth, nopaque-header, redirect-to-https@file"
      # - "traefik.http.routers.nopaque-secure.middlewares=nopaque-basicauth, hsts-header@file, nopaquesecure-header"
      ### </basicauth> ###
    networks:
      - default
      - reverse-proxy
    volumes:
      - "/mnt/dind-swarm/nopaque:/mnt/dind-swarm/nopaque"
      - "./app:/home/nopaque/app"
      - "./logs:/home/nopaque/logs"
      - "./migrations:/home/nopaque/migrations"
      - "./tests:/home/nopaque/tests"
      - "./config.py:/home/nopaque/config.py"
      - "./docker-entrypoint.sh:/usr/local/bin/docker-entrypoint.sh"
      - "./nopaque.py:/home/nopaque/nopaque.py"
      - "./requirements.txt:/home/nopaque/requirements.txt"
  daemon:
    depends_on:
      - db
      - web
    env_file: nopaque.env
    extra_hosts:
      - "host.docker.internal:172.17.0.1"
    image: gitlab.ub.uni-bielefeld.de:4567/sfb1288inf/opaque_daemon:latest
    volumes:
      - "/mnt/dind-swarm/nopaque:/mnt/dind-swarm/nopaque"
      - "./logs:/home/nopaqued/logs"
      - "../opaque_daemon/docker-entrypoint.sh:/usr/local/bin/docker-entrypoint.sh"
      - "../opaque_daemon/nopaqued.py:/home/nopaqued/nopaqued.py"
      - "../opaque_daemon/decorators.py:/home/nopaqued/decorators.py"
      - "../opaque_daemon/notify:/home/nopaqued/notify"
      - "../opaque_daemon/templates:/home/nopaqued/templates"
      - "../opaque_daemon/requirements.txt:/home/nopaqued/requirements.txt"
      - "$HOME/.docker:/home/nopaqued/.docker"
  db:
    env_file: nopaque.env
    image: postgres:11
    volumes:
      - "/srv/nopaque/db:/var/lib/postgresql/data"
  redis:
    image: redis:5
    volumes:
      - "redis-trash1:/data"