nixos-servers/legacy/projects/docker_swarm/ansible/roles/kitchenowl/docker-stack.yml.j2

# vi: ft=yaml
version: '3.7'

networks:
  traefik:
    external: true
  kitchenowl:

volumes:
  data:
    driver_opts:
      type: "nfs"
      o: "addr=lewis.dmz,nolock,soft,rw"
      device: ":/mnt/data/nfs/kitchenowl/data"

services:
  kitchenowl-front:
    image: tombursch/kitchenowl-web:v0.4.20
    depends_on:
      - kitchenowl
    networks:
      - traefik
      - kitchenowl
    deploy:
      labels:
        - traefik.enable=true
        - traefik.http.routers.kitchenowl.entrypoints=websecure
        - traefik.http.routers.kitchenowl.rule=Host(`boodschappen.kun.is`)
        - traefik.http.routers.kitchenowl.tls=true
        - traefik.http.routers.kitchenowl.tls.certresolver=letsencrypt
        - traefik.http.routers.kitchenowl.service=kitchenowl
        - traefik.http.services.kitchenowl.loadbalancer.server.port=80
        - traefik.docker.network=traefik
    environment:
      BACK_URL: 'kitchenowl:5000'
  kitchenowl:
    image: tombursch/kitchenowl:v92
    networks:
      - kitchenowl
    environment:
      - JWT_SECRET_KEY={{ jwt_secret_key }}
    volumes:
      - type: volume
        source: data
        target: /data
        volume:
          nocopy: true