services:
  copyparty:
    image: copyparty/ac:latest
    user: "1000:1000"
    volumes:
      - "{{ bin_base }}/volumes/share:/w:z"
      - "{{ bin_base }}/volumes/conf:/cfg:z"
    environment:
      - TZ={{ timezone }}
      - DEPLOYMENT_TIME={{ deployment_time }}
      - LD_PRELOAD=/usr/lib/libmimalloc-secure.so.NOPE
      - PYTHONUNBUFFERED=1
    healthcheck:
      test: ["CMD-SHELL", "wget --spider -q 127.0.0.1:3923/?reset=/._"]
      interval: 1m
      timeout: 2s
      retries: 5
      start_period: 15s
    networks:
      - proxy
    deploy:
      mode: replicated
      replicas: 1
      update_config:
        parallelism: 1
        failure_action: rollback
        order: start-first
        delay: 10s
        monitor: 10s
      labels:
        - traefik.enable=true
        - traefik.swarm.network=proxy
        - traefik.http.routers.bin.tls=true
        - traefik.http.routers.bin.tls.certResolver=letsencrypt
        - traefik.http.routers.bin.rule=Host(`{{ bin_domain }}`)
        - traefik.http.routers.bin.entrypoints=websecure
        - traefik.http.routers.bin.middlewares=oauth-verify
        - traefik.http.services.bin.loadbalancer.server.port=3923

networks:
  proxy:
    external: true