version: "3.8"

services:
  app:
    secrets:
      - whiteboard_jwt

  whiteboard:
    image: ghcr.io/nextcloud-releases/whiteboard:v1.0.5
    deploy:
      labels:
        - traefik.enable=true
        - traefik.docker.network=proxy
        - traefik.http.services.${STACK_NAME}_whiteboard.loadbalancer.server.port=3002
        - traefik.http.routers.${STACK_NAME}_whiteboard.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS}) && PathPrefix(`/whiteboard`)
        - traefik.http.routers.${STACK_NAME}_whiteboard.entrypoints=web-secure
        - traefik.http.routers.${STACK_NAME}_whiteboard.tls.certresolver=${LETS_ENCRYPT_ENV}
        - traefik.http.middlewares.${STACK_NAME}_whiteboard-stripprefix.stripprefix.prefixes=/whiteboard
        - traefik.http.routers.${STACK_NAME}_whiteboard.middlewares=${STACK_NAME}_whiteboard-stripprefix
    configs:
      - source: entrypoint_whiteboard
        target: /custom-entrypoint.sh
    entrypoint: ["sh", "/custom-entrypoint.sh"]
    user: root
    networks:
     - proxy
    ports:
      - 3002:3002
    secrets:
      - whiteboard_jwt
    environment:
      - NEXTCLOUD_URL=https://$DOMAIN
      - JWT_SECRET_KEY_FILE=/run/secrets/whiteboard_jwt

secrets:
  whiteboard_jwt:
    external: true
    name: ${STACK_NAME}_whiteboard_jwt_${SECRET_WHITEBOARD_JWT_VERSION}

configs:
  entrypoint_whiteboard:
    name: ${STACK_NAME}_entrypoint_whiteboard_${ENTRYPOINT_WHITEBOARD_VERSION}
    file: entrypoint.whiteboard.sh.tmpl
    template_driver: golang