---
version: "3.8"

services:
  ssh:
    image: lscr.io/linuxserver/openssh-server
    environment:
      - PUID=33
      - PGID=33
      - PUBLIC_KEY=${SSH_PUBLIC_KEY}
      - USER_NAME=wordpress
      - PASSWORD_ACCESS=false
    networks:
      - proxy
    deploy:
      update_config:
        failure_action: rollback
        order: start-first
      labels:
        - "traefik.enable=true"
        - "traefik.tcp.routers.${STACK_NAME}-ssh.rule=HostSNI(`*`)"
        - "traefik.tcp.routers.${STACK_NAME}-ssh.entrypoints=gitea-ssh"
        - "traefik.tcp.services.${STACK_NAME}-ssh.loadbalancer.server.port=2222"

networks:
  proxy:
    external: true