version: "3.8"
services:
  app:
    image: git.coopcloud.tech/coop-cloud-chaos-patchs/go-ssb-room:577529e
    networks:
      - proxy
    environment:
      - DOMAIN
      - HTTPS_DOMAIN=$DOMAIN
      - ALIASES_AS_SUBDOMAINS=true
      - REPO=/ssb-go-room-secrets
    volumes:
      - "data:/ssb-go-room-secrets"
    deploy:
      restart_policy:
        condition: on-failure
      labels:
        - "traefik.enable=true"
        - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=3000"
        - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`) || HostRegexp(`{subdomain:\\w+}.${DOMAIN}`)"
        - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
        - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
        - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect-aliases@docker"
        - "traefik.http.middlewares.${STACK_NAME}-redirect-aliases.redirectregex.regex=^https://(\\w+)\\.${DOMAIN}/(.*)"
        - "traefik.http.middlewares.${STACK_NAME}-redirect-aliases.redirectregex.replacement=https://${DOMAIN}/alias/$${1}$${2}"
        - "traefik.tcp.routers.${STACK_NAME}-muxrpc.rule=HostSNI(`*`)"
        - "traefik.tcp.routers.${STACK_NAME}-muxrpc.entrypoints=ssb-muxrpc"
        - "traefik.tcp.services.${STACK_NAME}-muxrpc.loadbalancer.server.port=8008"
        - "traefik.http.routers.${STACK_NAME}.tls.domains[0].main=${DOMAIN}"
        - "traefik.http.routers.${STACK_NAME}.tls.domains[0].sans=*.${DOMAIN}"
        - coop-cloud.${STACK_NAME}.version=0.1.1+577529e
networks:
  proxy:
    external: true
volumes:
  data: