docker-compose.override.prod.yml.dist

version: '3.2'

services:
  letsencrypt-companion:
    build:
      context: ./docker/letsencrypt-companion
      dockerfile: ./Dockerfile
    deploy:
      endpoint_mode: dnsrr
      placement:
        constraints:
          - node.id == $DOCKER_NODE_ID
      resources:
        limits:
          cpus: '1.0'
          memory: 1G
      restart_policy:
        condition: any
        delay: 5s
        window: 10s
    environment:
      # - ACME_CA_URI=https://acme-staging.api.letsencrypt.org/directory
      # - DEBUG=true
      - MODE=swarm
    healthcheck:
      interval: 30s
      retries: 3
      timeout: 30s
    image: quay.io/tripviss/tripviss-nginx-proxy:letsencrypt-companion
    networks:
      - default
    restart: always
    volumes:
      - ./certs:/etc/nginx/certs:rw
      - ./vhost.d:/etc/nginx/vhost.d:rw
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - nginx-contents:/usr/share/nginx/html:nocopy

  nginx:
    deploy:
      endpoint_mode: dnsrr
      placement:
        constraints:
          - node.id == $DOCKER_NODE_ID
      resources:
        limits:
          cpus: '1.0'
          memory: 1G
      restart_policy:
        condition: any
        delay: 5s
        window: 10s
    healthcheck:
      interval: 30s
      retries: 3
      timeout: 30s
    image: quay.io/tripviss/tripviss-nginx-proxy:nginx
    labels:
      - 'com.github.jwilder.nginx_proxy.nginx'
    networks:
      - default
    ports:
      - mode: host
        protocol: tcp
        published: 80
        target: 80
      - mode: host
        protocol: tcp
        published: 443
        target: 443
    restart: always
    volumes:
      - ./certs/dhparam.pem:/etc/nginx/dhparam/dhparam.pem:ro

  nginx-gen:
    deploy:
      endpoint_mode: dnsrr
      placement:
        constraints:
          - node.id == $DOCKER_NODE_ID
      resources:
        limits:
          cpus: '1.0'
          memory: 1G
      restart_policy:
        condition: any
        delay: 5s
        window: 10s
    environment:
      - MODE=swarm
    healthcheck:
      interval: 30s
      retries: 3
      timeout: 30s
    image: quay.io/tripviss/tripviss-nginx-proxy:nginx-gen
    labels:
      - 'com.github.jrcs.docker_letsencrypt_nginx_proxy_companion.docker_gen'
    networks:
      - default
    restart: always
    volumes:
      - ./certs/dhparam.pem:/etc/nginx/dhparam/dhparam.pem:ro

networks:
  default: {}