name: addideas-toolbox

services:
  toolbox:
    build:
      context: .
      dockerfile: Containerfile.release
      args:
        TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.3.0}"
        TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-718a3c8b891e66f5601115270f25acaec9dbe1b9640a72c17954353bb10db93e}"
    image: "git.add-ideas.de/zemion/toolbox:${TOOLBOX_RELEASE_VERSION:-0.3.0}"
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /tmp:size=16m,mode=1777
      - /var/cache/nginx:size=16m,uid=101,gid=101
      - /var/run:size=1m,uid=101,gid=101
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    networks:
      - internal
    labels:
      traefik.enable: "true"
      traefik.docker.network: "${TRAEFIK_NETWORK:-internal}"
      traefik.http.routers.addideas-toolbox.rule: "Host(`${TOOLBOX_HOST:-toolbox.add-ideas.de}`)"
      traefik.http.routers.addideas-toolbox.entrypoints: websecure
      traefik.http.routers.addideas-toolbox.tls: "true"
      traefik.http.routers.addideas-toolbox.tls.certresolver: "${TRAEFIK_CERT_RESOLVER:-netcup}"
      traefik.http.routers.addideas-toolbox.service: addideas-toolbox
      traefik.http.services.addideas-toolbox.loadbalancer.server.port: "8080"

networks:
  internal:
    external: true
    name: "${TRAEFIK_NETWORK:-internal}"