name: addideas-toolbox

services:
  toolbox:
    build:
      context: .
      dockerfile: Containerfile.release
      args:
        TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.4.0}"
        TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-0264f5ee2c545c10c50b96a5b6d55c3576b39bb29c546e1e4f1459fec4e8e112}"
    image: "git.add-ideas.de/zemion/toolbox:${TOOLBOX_RELEASE_VERSION:-0.4.0}"
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /tmp:size=16m,mode=1777
      - /var/cache/nginx:size=16m,uid=101,gid=101
      - /var/run:size=1m,uid=101,gid=101
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    networks:
      - internal
    labels:
      traefik.enable: "true"
      traefik.docker.network: "${TRAEFIK_NETWORK:-internal}"
      traefik.http.routers.addideas-toolbox.rule: "Host(`${TOOLBOX_HOST:-toolbox.add-ideas.de}`)"
      traefik.http.routers.addideas-toolbox.priority: 900
      traefik.http.routers.addideas-toolbox.entrypoints: websecure
      traefik.http.routers.addideas-toolbox.tls: "true"
      traefik.http.routers.addideas-toolbox.tls.certresolver: "${TRAEFIK_CERT_RESOLVER:-netcup}"
      traefik.http.routers.addideas-toolbox.service: addideas-toolbox
      traefik.http.services.addideas-toolbox.loadbalancer.server.port: "8080"

networks:
  internal:
    external: true
    name: "${TRAEFIK_NETWORK:-internal}"