---
version: "3.8"

x-ssh_env: &ssh_env
  - SSH_KEY_FILE=/run/secrets/ssh_key
  - SSH_HOST_KEY

x-ssh_secrets: &ssh_secrets
  - source: ssh_key
    mode: 0400

x-ssh_configs: &ssh_configs
  - source: ssh_config
    target: /root/.ssh/config

services:
  app:
    environment:
      *ssh_env
    secrets:
      *ssh_secrets
    configs:
      *ssh_configs

  restic-exporter:
    environment:
      *ssh_env
    secrets:
      *ssh_secrets
    configs:
      *ssh_configs

secrets:
  ssh_key:
    external: true
    name: ${STACK_NAME}_ssh_key_${SECRET_SSH_KEY_VERSION}

configs:
  ssh_config:
    name: ${STACK_NAME}_ssh_config_${SSH_CONFIG_VERSION}
    file: ssh_config