---
version: "3.8"

services:
  app:
    image: zedeus/nitter:latest
    configs:
      - source: nitter_conf
        target: /src/nitter.conf
    secrets:
      - hmac_key
    environment:      
      - NITTER_TITLE
      - NITTER_HOSTNAME
      - NITTER_BASE64_MEDIA
      - NITTER_ENABLE_RSS
      - NITTER_ENABLE_DEBUG
      - NITTER_THEME
      - NITTER_REPLACE_TWITTER
      - NITTER_REPLACE_YOUTUBE
      - NITTER_REPLACE_REDDIT
      - NITTER_REPLACE_INSTAGRAM
      - NITTER_PROXY_VIDEOS
      - NITTER_HLS_PLAYBACK
      - NITTER_INFINITE_SCROLL
    depends_on:
      - redis
    networks:
      - proxy
      - internal
    volumes:
      - config:/src
    deploy:
      restart_policy:
        condition: on-failure
      labels:
        - "traefik.enable=true"
        - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=8080"
        - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
        - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
        - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
        ## Redirect from EXTRA_DOMAINS to DOMAIN
        #- "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
        #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
        #- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
        - "coop-cloud.${STACK_NAME}.version="
    healthcheck:
      test: "wget -nv --tries=1 --spider http://127.0.0.1:8080/Jack/status/20 || exit 1"
      interval: 30s
      timeout: 10s
      retries: 10
      start_period: 1m

  redis:
    image: redis:6-alpine
    networks:
      - internal
    deploy:
      restart_policy:
        condition: on-failure
    #healthcheck:
      #test: ["CMD", "redis-cli", "ping"]

networks:
  internal:
  proxy:
    external: true

configs:
  nitter_conf:
    name: ${STACK_NAME}_nitter_conf_${NITTER_CONF_VERSION}
    file: nitter.conf.tmpl
    template_driver: golang

secrets:
  hmac_key:
    name: ${STACK_NAME}_hmac_key_${SECRET_HMAC_KEY_VERSION}
    external: true

volumes:
  config: