---
version: "3.8"

services:
  app:
    image: statuspal/statuspal:latest
    depends_on:
      - db
    volumes:
      - uploads:/statushq/uploads
    command: ["/statushq/docker/up.sh", "postgres"]
    #entrypoint: ["tail", "-f", "/dev/null"]
    networks:
      - proxy
      - internal
    environment:
      - SECRET_KEY_BASE
      - NODE_COOKIE
      - MG_DOMAIN
      - MG_API_KEY
      - URL_HOST=${DOMAIN}
      - URL_SCHEMA=https
      - URL_PORT=443
      - DB_NAME=statushq
      - DB_USERNAME=postgres
      - DB_HOSTNAME=db
      - DB_PASSWORD
      - LOG_LEVEL
      - SP_SUBDOMAINS
      - NODE_IP
      - C_TITLE
      - C_DESCRIPTION
    depends_on:
      - db
    configs:
      - source: entrypoint_conf
        target: /statushq/docker/up.sh
        mode: 0555
    secrets:
      - db_password
    deploy:
      restart_policy:
        condition: on-failure
      labels:
        - "traefik.enable=true"
        - "traefik.docker.network=proxy"
        - "traefik.http.services.${STACK_NAME}.loadbalancer.server.port=4000"
        - "traefik.http.routers.${STACK_NAME}.rule=Host(`${DOMAIN}`${EXTRA_DOMAINS})"
        - "traefik.http.routers.${STACK_NAME}.entrypoints=web-secure"
        - "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"

  db:
    image: postgres:9.5
    environment:
      - POSTGRES_USER=postgres
      - POSTGRES_PASSWORD_FILE=/run/secrets/db_password
      - POSTGRES_DB=statushq
    networks:
      - internal
    volumes:
      - postgres:/var/lib/postgresql/data
    secrets:
      - db_password

networks:
  proxy:
    external: true
  internal:

volumes:
  uploads:
  postgres:

secrets:
  db_password:    
    external: true 
    name: ${STACK_NAME}_db_password_${SECRET_DB_PASSWORD_VERSION}

configs:
  entrypoint_conf:
    name: ${STACK_NAME}_entrypoint_${ENTRYPOINT_CONF_VERSION}
    file: entrypoint.sh.tmpl
    template_driver: golang