name: fiws-page

services:
  fiws-page:
    image: "${IMAGE_NAME:-fiws-page}:${IMAGE_TAG:-latest}"
    build:
      context: .
      dockerfile: Dockerfile
      target: runtime
    restart: unless-stopped
    init: true
    user: "101:101"
    read_only: true
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true
    tmpfs:
      - /tmp:rw,noexec,nosuid,nodev,size=16m,uid=101,gid=101,mode=1770
    pids_limit: 64
    mem_limit: 128m
    cpus: 0.50
    stop_grace_period: 10s
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "3"
    expose:
      - "8080"
    networks:
      - proxy
    labels:
      traefik.enable: "true"
      traefik.docker.network: "${TRAEFIK_NETWORK:-proxy}"

      traefik.http.services.fiws-page.loadbalancer.server.port: "8080"

      traefik.http.routers.fiws-page.rule: "Host(`${DOMAIN:-fiwlabs.dev}`)"
      traefik.http.routers.fiws-page.entrypoints: "${TRAEFIK_HTTPS_ENTRYPOINT:-websecure}"
      traefik.http.routers.fiws-page.service: "fiws-page"
      traefik.http.routers.fiws-page.tls: "true"
      traefik.http.routers.fiws-page.tls.certresolver: "${TRAEFIK_CERT_RESOLVER:-porkbun}"

networks:
  proxy:
    external: true
    name: "${TRAEFIK_NETWORK:-proxy}"