# vi: ft=yaml
version: '3'

networks:
  traefik:
    external: true

services:
  static:
    image: git.kun.is/pim/static:TAG
    networks:
      - traefik
    deploy:
      labels:
        - traefik.enable=true

        - traefik.http.routers.blog.entrypoints=websecure
        - traefik.http.routers.blog.service=static
        - traefik.http.services.static.loadbalancer.server.port=80
        - traefik.http.routers.blog.rule=Host(`pim.kun.is`)
        - traefik.http.routers.blog.tls=true
        - traefik.http.routers.blog.tls.certresolver=letsencrypt

        - traefik.http.routers.redirects.entrypoints=websecure
        - traefik.http.routers.redirects.service=static
        - "traefik.http.routers.redirects.rule=(Host(`pim.kunis.nl`) || Host(`concourse.pim.kunis.nl`) || Host(`rss.pim.kunis.nl`) || Host(`md.pim.kunis.nl`) || Host(`cloud.pim.kunis.nl`) || Host(`dav.pim.kunis.nl`) || Host(`git.pim.kunis.nl`) || Host(`latex.pim.kunis.nl`) || Host(`grades.when.kun.is`) || Path(`/robots.txt`))"
        - traefik.http.routers.redirects.tls=true
        - traefik.http.routers.redirects.tls.certresolver=letsencrypt

        - traefik.http.routers.redirects-local.entrypoints=localsecure
        - traefik.http.routers.redirects-local.service=static
        - "traefik.http.routers.redirects-local.rule=(Host(`traefik.pim.kunis.nl`) || Host(`pihole.pim.kunis.nl`) || Host(`swarm.pim.kunis.nl`) || Host(`uptime.pim.kunis.nl`))"
        - traefik.http.routers.redirects-local.tls=true
        - traefik.http.routers.redirects-local.tls.certresolver=letsencrypt