# vi: ft=yaml
version: "3.7"

networks:
  traefik:
    external: true

services:
  cyberchef:
    image: mpepping/cyberchef
    networks:
      - traefik
    deploy:
      placement:
        constraints:
          - "node.labels.public == true"
      labels:
        - traefik.enable=true
        - traefik.http.routers.cyberchef.entrypoints=websecure
        - traefik.http.services.cyberchef.loadbalancer.server.port=8000
        - traefik.http.routers.cyberchef.rule=Host(`cyberchef.geokunis2.nl`)
        - traefik.http.routers.cyberchef.tls=true
        - traefik.http.routers.cyberchef.tls.certresolver=letsencrypt