name: fiws-page

services:
  fiws-page:
    image: fiws-page:latest
    container_name: fiws-page
    build:
      context: .
      dockerfile: Dockerfile
      target: runtime
    restart: unless-stopped
    init: true
    read_only: true
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /var/cache/nginx
      - /var/run
      - /tmp
    expose:
      - "80"
    networks:
      - proxy
    labels:
      traefik.enable: "true"
      traefik.docker.network: "${TRAEFIK_NETWORK:-proxy}"

      traefik.http.services.fiws-page.loadbalancer.server.port: "80"

      traefik.http.routers.fiws-page.rule: "Host(`${DOMAIN:-fiwlabs.dev}`)"
      traefik.http.routers.fiws-page.entrypoints: "${TRAEFIK_HTTPS_ENTRYPOINT:-websecure}"
      traefik.http.routers.fiws-page.service: "fiws-page"
      traefik.http.routers.fiws-page.tls: "true"
      traefik.http.routers.fiws-page.tls.certresolver: "${TRAEFIK_CERT_RESOLVER:-porkbun}"

networks:
  proxy:
    external: true
    name: "${TRAEFIK_NETWORK:-proxy}"