---
version: "3.8"

services:
  app:
    secrets:
      - source: metrics_token
        mode: 0600
      - source: admin_token
        mode: 0600
    deploy:
      labels:
        - "traefik.http.routers.${STACK_NAME}-metrics.rule=Host(`${DOMAIN}`) && Path(`/metrics`)"
        - "traefik.http.routers.${STACK_NAME}-metrics.entrypoints=web-secure"
        - "traefik.http.routers.${STACK_NAME}-metrics.tls.certresolver=${LETS_ENCRYPT_ENV}"
        - "traefik.http.routers.${STACK_NAME}-metrics.service=${STACK_NAME}-metrics"
        - "traefik.http.services.${STACK_NAME}-metrics.loadbalancer.server.port=3903"

secrets:
  admin_token:
    name: ${STACK_NAME}_admin_token_${SECRET_ADMIN_TOKEN_SECRET_VERSION}
    external: true
  metrics_token:
    name: ${STACK_NAME}_metrics_token_${SECRET_METRICS_TOKEN_SECRET_VERSION}
    external: true