# vi: ft=yaml
version: "3"

networks:
  traefik:
    external: true

volumes:
  data:
    driver_opts:
      type: "nfs"
      o: "addr=lewis.dmz,nolock,soft,rw"
      device: ":/mnt/data/freshrss/data"
  extensions:
    driver_opts:
      type: "nfs"
      o: "addr=lewis.dmz,nolock,soft,rw"
      device: ":/mnt/data/freshrss/extensions"

services:
  freshrss:
    image: freshrss/freshrss:edge
    networks:
      - traefik
    volumes:
      - type: volume
        source: data
        target: /var/www/FreshRSS/data
        volume:
          nocopy: true
      - type: volume
        source: extensions
        target: /var/www/FreshRSS/extensions
        volume:
          nocopy: true
    environment:
      TZ: Europe/Amsterdam
      CRON_MIN: '2,32'
      ADMIN_EMAIL: pim@kunis.nl
      ADMIN_PASSWORD: {{ admin_password }}
      ADMIN_API_PASSWORD: {{ admin_password }}
      PUBLISHED_PORT: 443
    deploy:
      labels:
        - traefik.enable=true
        - traefik.http.routers.freshrss.entrypoints=websecure
        - traefik.http.routers.freshrss.rule=Host(`rss.kun.is`)
        - traefik.http.routers.freshrss.tls=true
        - traefik.http.routers.freshrss.tls.certresolver=letsencrypt
        - traefik.http.routers.freshrss.service=freshrss
        - traefik.http.services.freshrss.loadbalancer.server.port=80
        - traefik.docker.network=traefik