# vi: ft=yaml
version: "3"

networks:
  traefik:
    external: true

services:
  freshrss:
    image: freshrss/freshrss:edge
    networks:
      - traefik
    volumes:
      - type: bind
        source: /mnt/data/freshrss/data
        target: /var/www/FreshRSS/data
      - type: bind
        source: /mnt/data/freshrss/extensions
        target: /var/www/FreshRSS/extensions
    environment:
      TZ: Europe/Amsterdam
      CRON_MIN: '2,32'
      ADMIN_EMAIL: pim@kunis.nl
      ADMIN_PASSWORD: {{ admin_password }}
      ADMIN_API_PASSWORD: {{ admin_password }}
      PUBLISHED_PORT: 443
    deploy:
      placement:
        constraints:
          - "node.labels.freshrss == true"
      labels:
        - traefik.enable=true
        - traefik.http.routers.freshrss.entrypoints=websecure
        - traefik.http.routers.freshrss.rule=Host(`rss.pim.kunis.nl`)
        - traefik.http.routers.freshrss.tls=true
        - traefik.http.routers.freshrss.tls.certresolver=letsencrypt
        - traefik.http.routers.freshrss.service=freshrss
        - traefik.http.services.freshrss.loadbalancer.server.port=80
        - traefik.docker.network=traefik