version: '3.8'

services:
  web:
    image: simo/web:${IMAGE_TAG:-latest}
    expose:
      - 3000
    networks:
      - traefik_traefikfront
    deploy:
      labels:
        - traefik.enable=true
        - traefik.http.routers.simo.rule=Host(`simo.antopoid.com`)
        - traefik.http.routers.simo.entrypoints=websecure
        - traefik.http.routers.simo.tls.certresolver=myhttpchallenge
        - traefik.http.services.simo.loadbalancer.server.port=3000
        - traefik.http.middlewares.simo-proxy-headers.headers.customrequestheaders.X-Forwarded-For=
        - traefik.http.routers.simo.middlewares=simo-proxy-headers
        - traefik.http.services.simo.loadbalancer.passhostheader=true
      placement:
        constraints:
          - "node.hostname==macmini"
      replicas: 1
      restart_policy:
        condition: on-failure
      update_config:
        parallelism: 1
        delay: 10s
        order: start-first

networks:
  traefik_traefikfront:
    external: true