version: '3.2'

services:
  kanboard:
    image: kanboard/kanboard:latest
    volumes:
      - {{ kanboard_base }}/volumes/data:/var/www/app/data
      - {{ kanboard_base }}/volumes/plugins:/var/www/app/plugins
    environment:
      - TZ={{ timezone }}
      - LOG_DRIVER=syslog
      - LDAP_AUTH={{ kanboard_ldap_auth }}
      - LDAP_SERVER={{ kanboard_ldap_server }}
      - LDAP_SSL_VERIFY={{ kanboard_ldap_ssl_verify }}
      - LDAP_BIND_TYPE={{ kanboard_ldap_bind_type }}
      - LDAP_USERNAME={{ kanboard_ldap_username }}
      - LDAP_PASSWORD={{ kanboard_ldap_password }}
      - LDAP_USER_BASE_DN={{ kanboard_ldap_user_base_dn }}
      - LDAP_USER_ATTRIBUTE_EMAIL={{ kanboard_ldap_user_attribute_email }}
      - LDAP_USER_CREATION={{ kanboard_ldap_user_creation }}
      - LDAP_USER_FILTER={{ kanboard_ldap_user_filter }}
      - LDAP_GROUP_PROVIDER={{ kanboard_ldap_group_provider }}
      - LDAP_GROUP_BASE_DN={{ kanboard_ldap_group_base_dn }}
      - LDAP_GROUP_FILTER={{ kanboard_ldap_group_filter }}
      - LDAP_GROUP_ADMIN_DN={{ kanboard_ldap_group_admin_dn }}
      - LDAP_GROUP_MANAGER_DN={{ kanboard_ldap_group_manager_dn }}
    networks:
      - proxy
    deploy:
      mode: replicated
      replicas: 1
      labels:
        - traefik.enable=true
        - traefik.swarm.network=proxy
        - traefik.http.routers.kanboard.tls=true
        - traefik.http.routers.kanboard.tls.certResolver=letsencrypt
        - traefik.http.routers.kanboard.rule=Host(`{{ kanboard_domain }}`)
        - traefik.http.routers.kanboard.entrypoints=websecure
        - traefik.http.services.kanboard.loadbalancer.server.port=80

networks:
  proxy:
    external: true