services:
  bin:
    image: stonith404/pingvin-share
    volumes:
      - {{ bin_base }}/volumes/data:/data
    environment:
      - TZ={{ timezone }}
      - DEPLOYMENT_TIME={{ now() }}
      - TRUST_PROXY=true
      - API_URL=https://{{ bin_domain }}
      - DATA_DIRECTORY=/data
      - DATABASE_URL=file:/data/pingvin-share.db?connection_limit=1
    healthcheck:
      test: ["CMD", "curl", "--fail", "http://localhost:3000/api/configs"]
      timeout: 3s
      interval: 1m
      retries: 2
      start_timeout: 10s
    networks:
      - proxy
    deploy:
      mode: replicated
      replicas: 1
      update_config:
        parallelism: 1
        failure_action: rollback
        order: start-first
        delay: 10s
        monitor: 10s
      labels:
        - traefik.enable=true
        - traefik.swarm.network=proxy
        - traefik.http.routers.bin.tls=true
        - traefik.http.routers.bin.tls.certResolver=letsencrypt
        - traefik.http.routers.bin.rule=Host(`{{ bin_domain }}`)
        - traefik.http.routers.bin.entrypoints=websecure
        - traefik.http.services.bin.loadbalancer.server.port=3000

networks:
  proxy:
    external: true