---
services:
  ferdium-server:
    image: ferdium/ferdium-server:{{FERDIUM_VERSION}}
    restart: unless-stopped
    depends_on:
      - mariadb
    environment:
      - NODE_ENV={{FERDIUM_NODEENV}}
      - APP_URL={{FERDIUM_URL}}
      - DB_CONNECTION={{FERDIUM_DATABASE}}
      - DB_HOST={{FERDIUM_DBHOST}}
      - DB_PORT={{FERDIUM_DBPORT}}
      - DB_USER={{MARIADB_USER}}
      - DB_PASSWORD={{MARIADB_PASSWORD}}
      - DB_DATABASE={{MARIADB_DATABASE}}
      - DB_SSL={{FERDIUM_DBSSL}}
      - MAIL_CONNECTION={{FERDIUM_MAIL}}
      - SMTP_HOST={{FERDIUM_MAILHOST}}
      - SMTP_PORT={{FERDIUM_MAILPORT}}
      - MAIL_SSL={{FERDIUM_MAILSSL}}
      - MAIL_USERNAME={{FERDIUM_MAILUSER}}
      - MAIL_PASSWORD={{FERDIUM_MAILPASS}}
      - MAIL_SENDER={{FERDIUM_MAILSENDER}}
      - IS_CREATION_ENABLED={{FERDIUM_RECIPESCREATION}}
      - IS_DASHBOARD_ENABLED={{FERDIUM_DASHBOARD}}
      - IS_REGISTRATION_ENABLED={{FERDIUM_REGISTRATION}}
      - CONNECT_WITH_FRANZ={{FERDIUM_FRANZ}}
      - DATA_DIR=/data
      - JWT_USE_PEM=true
    labels:
      ### Section Træfik
      - traefik.enable={{TRAEFIK_ENABLED}}
      - traefik.docker.network={{TRAEFIK_NETWORK}}
      ## HTTP
      - traefik.http.routers.http-{{TRAEFIK_ROUTER}}.entrypoints=http
      # redirect to HTTPS only
      - traefik.http.routers.http-{{TRAEFIK_ROUTER}}.middlewares={{TRAEFIK_HTTP_MIDDLEWARES}}
      - traefik.http.routers.http-{{TRAEFIK_ROUTER}}.rule={{TRAEFIK_MATCHRULE}}
      ## HTTPS
      - traefik.http.routers.https-{{TRAEFIK_ROUTER}}.entrypoints=https
      # configure the exposed service
      - traefik.http.routers.https-{{TRAEFIK_ROUTER}}.middlewares={{TRAEFIK_HTTPS_MIDDLEWARES}}
      - traefik.http.routers.https-{{TRAEFIK_ROUTER}}.rule={{TRAEFIK_MATCHRULE}}
      # enable TLS and its certificate provider
      - traefik.http.routers.https-{{TRAEFIK_ROUTER}}.tls={{TRAEFIK_TLSENABLED}}
      - traefik.http.routers.https-{{TRAEFIK_ROUTER}}.tls.certresolver={{TRAEFIK_CERTRESOLVER}}
      # specify a service so a custom port can be used
      - traefik.http.services.{{TRAEFIK_SERVICE}}.loadbalancer.server.port={{TRAEFIK_SERVICE_PORT}}
      ### Section Diun
      - diun.enable={{FERDIUM_DIUN_ENABLE}}
      - diun.watch_repo={{FERDIUM_DIUN_WATCHREPO}}
      - diun.sort_tags={{FERDIUM_DIUN_SORTALGO}}
      - diun.include_tags={{FERDIUM_DIUN_INCLUDE}}
      - diun.exclude_tags={{FERDIUM_DIUN_EXCLUDE}}
    networks:
      - internal
      - traefik
    volumes:
      - {{FERDIUM_DATA}}:/data
      - {{FERDIUM_RECIPES}}:/app/recipes

  mariadb:
    image: mariadb:{{MARIADB_VERSION}}
    restart: unless-stopped
    environment:
      - MARIADB_ROOT_PASSWORD={{MARIADB_ROOT_PASSWORD}}
      - MARIADB_USER={{MARIADB_USER}}
      - MARIADB_PASSWORD={{MARIADB_PASSWORD}}
      - MARIADB_DATABASE={{MARIADB_DATABASE}}
    labels:
      ### Section Diun
      - diun.enable={{MARIADB_DIUN_ENABLE}}
      - diun.watch_repo={{MARIADB_DIUN_WATCHREPO}}
      - diun.sort_tags={{MARIADB_DIUN_SORTALGO}}
      - diun.include_tags={{MARIADB_DIUN_INCLUDE}}
      - diun.exclude_tags={{MARIADB_DIUN_EXCLUDE}}
    networks:
      - internal
    volumes:
      - {{MARIADB_DATA}}:/var/lib/mysql

networks:
  internal:
  traefik:
    external: true
    name: {{TRAEFIK_NETWORK}}