services:
  src:
    image: charmcli/soft-serve
    volumes:
      - {{ src_base }}/volumes/data:/soft-serve
    ports:
      - "23231:23231"
    environment:
      - TZ={{ timezone }}
      - DEPLOYMENT_TIME={{ now() }}
      - SOFT_SERVE_NAME={{ src_domain }}
      - SOFT_SERVE_HTTP_PUBLIC_URL=https://{{ src_domain }}
      - SOFT_SERVE_INITIAL_ADMIN_KEYS={{ src_admin_keys }}
    networks:
      - proxy
    healthcheck:
      test: ["CMD-SHELL", "echo hi"] # todo: something more meaningful
      timeout: 15s
      interval: 30s
      retries: 3
      start_period: 10s
    deploy:
      mode: replicated
      update_config:
        parallelism: 1
        failure_action: rollback
        order: start-first
        delay: 10s
        monitor: 45s
      replicas: 1
      labels:
        - traefik.enable=true
        - traefik.swarm.network=proxy
        - traefik.http.routers.src.tls=true
        - traefik.http.routers.src.tls.certResolver=letsencrypt
        - traefik.http.routers.src.rule=Host(`{{ src_domain }}`)
        - traefik.http.routers.src.entrypoints=websecure
        - traefik.http.services.src.loadbalancer.server.port=23232

networks:
  proxy:
    external: true