version: "3.8"

services:
  talk:
    image: "nextcloud/aio-talk:20251128_084214"
    environment:
      - NC_DOMAIN=${DOMAIN}
      - TALK_HOST=${TALK_DOMAIN}
      - TZ
      - TALK_PORT=3478
      - INTERNAL_SECRET_FILE=/run/secrets/talk_internal_secret 
      - TURN_SECRET_FILE=/run/secrets/talk_turn_secret
      - SIGNALING_SECRET_FILE=/run/secrets/talk_signaling_secret
    deploy:
      labels:
        - traefik.enable=true
        - traefik.docker.network=proxy
        - traefik.http.services.${STACK_NAME}_talk.loadbalancer.server.port=8081
        - traefik.http.routers.${STACK_NAME}_talk.rule=Host(`${TALK_DOMAIN}`)
        - traefik.http.routers.${STACK_NAME}_talk.entrypoints=web-secure
        - traefik.http.routers.${STACK_NAME}_talk.tls.certresolver=${LETS_ENCRYPT_ENV}
        - traefik.tcp.routers.${STACK_NAME}_nextcloud-talk-hpb.rule=HostSNI(`*`)
        - traefik.tcp.routers.${STACK_NAME}_nextcloud-talk-hpb.entrypoints=nextcloud-talk-hpb
        - traefik.tcp.routers.${STACK_NAME}_nextcloud-talk-hpb.service=${STACK_NAME}_nextcloud-talk-hpb-svc
        - traefik.tcp.services.${STACK_NAME}_nextcloud-talk-hpb-svc.loadbalancer.server.port=3478
        - traefik.udp.routers.${STACK_NAME}_nextcloud-talk-hpb-udp.entrypoints=nextcloud-talk-hpb-udp
        - traefik.udp.routers.${STACK_NAME}_nextcloud-talk-hpb-udp.service=${STACK_NAME}_nextcloud-talk-hpb-udp-svc
        - traefik.udp.services.${STACK_NAME}_nextcloud-talk-hpb-udp-svc.loadbalancer.server.port=3478
    networks:
      - proxy
    configs:
      - source: entrypoint_talk
        target: /custom-entrypoint.sh
        mode: 775
    entrypoint: /custom-entrypoint.sh
    secrets:
      - source: talk_internal_secret
        uid: "1000"
        gid: "122"
        mode: 0600
      - source: talk_turn_secret
        uid: "1000"
        gid: "122"
        mode: 0600
      - source: talk_signaling_secret
        uid: "1000"
        gid: "122"
        mode: 0600

  app:
    secrets:
      - talk_turn_secret
      - talk_signaling_secret

secrets:
  talk_internal_secret:
    external: true
    name: ${STACK_NAME}_talk_internal_secret_${SECRET_TALK_INTERNAL_SECRET_VERSION}
  talk_turn_secret:
    external: true
    name: ${STACK_NAME}_talk_turn_secret_${SECRET_TALK_TURN_SECRET_VERSION}
  talk_signaling_secret:
    external: true
    name: ${STACK_NAME}_talk_signaling_secret_${SECRET_TALK_SIGNALING_SECRET_VERSION}

configs:
  entrypoint_talk:
    name: ${STACK_NAME}_entrypoint_talk_${ENTRYPOINT_TALK_VERSION}
    file: entrypoint.talk.sh.tmpl
    template_driver: golang