# vi: ft=yaml
version: "3"

networks:
  traefik:
    external: true

configs:
  config:
    external: true
    name: "{{ config.config_name }}"
  private_key:
    external: true
    name: "{{ key.config_name }}"
  certificate:
    external: true
    name: "{{ cert.config_name }}"

volumes:
  nextcloud_data:
    driver_opts:
      type: "nfs"
      o: "addr=192.168.30.10,nolock,soft,rw"
      device: ":/mnt/data/nextcloud/data"

services:
  syncthing:
    image: lscr.io/linuxserver/syncthing:1.23.6
    networks:
      - traefik
    deploy:
      labels:
        - traefik.enable=true
        - traefik.docker.network=traefik

        - traefik.http.routers.syncthing.entrypoints=localsecure
        - traefik.http.routers.syncthing.rule=Host(`sync.kun.is`)
        - traefik.http.routers.syncthing.service=syncthing
        - traefik.http.routers.syncthing.tls=true
        - traefik.http.routers.syncthing.tls.certresolver=letsencrypt
        - traefik.http.services.syncthing.loadbalancer.server.port=8384
    environment:
      - PUID=33
      - PGID=33
      - TZ=Europe/Amsterdam
    volumes:
      - type: volume
        source: nextcloud_data
        target: /data
        volume:
          nocopy: true
    configs:
      - source: config
        target: /config/config.xml
      - source: private_key
        target: /config/key.pem
        uid: '33'
        gid: '33'
      - source: certificate
        target: /config/cert.pem
        uid: '33'
        gid: '33'