services:
  flowtodo:
    image: gitgud.foo/thegrind/flowtodo
    #environment:
      # If you're serving through a reverse proxy
      #- OCTANE_HTTPS=false 
    networks:
      - traefik_traefik_proxy
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure
      labels:
        # Enable Service discovery for Traefik
        - "traefik.enable=true"
        # Define the flowtodo router rule
        - "traefik.http.routers.flowtodo.rule=Host(`flowtodo.lan.xbazzi.com`)"
        # Expose flowtodo on the HTTPS entrypoint
        - "traefik.http.routers.flowtodo.entrypoints=websecure"
        # - "traefik.http.routers.flowtodo.entrypoints=web"
        # Enable TLS
        - "traefik.http.routers.flowtodo.tls=true"
        # - "traefik.http.routers.flowtodo.tls=false"
        # Expose the flowtodo port number to Traefik
        - "traefik.http.services.flowtodo.loadbalancer.server.port=8000"

        # Custom labels
        - "com.xbazzi.stack=flowtodo"
        - "com.xbazzi.critical=true"
      placement:
        constraints:
          - node.labels.zone == core
          - node.labels.type != db

networks:
  traefik_traefik_proxy:
    external: true