version: "3.8"

services:
  app:
    environment:
      - CLOUDFLARE_EMAIL_FILE=/run/secrets/cloudflare_email
      - CLOUDFLARE_API_KEY_FILE=/run/secrets/cloudflare_api_key
      - LETS_ENCRYPT_DNS_CHALLENGE_ENABLED
      - LETS_ENCRYPT_DNS_CHALLENGE_PROVIDER
    secrets:
      - cloudflare_email
      - cloudflare_api_key

secrets:
  cloudflare_email:
    name: ${STACK_NAME}_cloudflare_email_${SECRET_CLOUDFLARE_EMAIL_VERSION}
    external: true
  cloudflare_api_key:
    name: ${STACK_NAME}_cloudflare_api_key_${SECRET_CLOUDFLARE_API_KEY}
    external: true