# vi: ft=yaml
version: '3'

networks:
  traefik:
    external: true

services:
  static:
    image: git.kun.is/pim/static:TAG
    networks:
      - traefik
    deploy:
      placement:
        constraints:
          - "node.labels.public == true"
      labels:
        - traefik.enable=true

        - traefik.http.routers.blog.entrypoints=websecure
        - traefik.http.routers.blog.service=static
        - traefik.http.services.static.loadbalancer.server.port=80
        - traefik.http.routers.blog.rule=Host(`pim.kun.is`)
        - traefik.http.routers.blog.tls=true
        - traefik.http.routers.blog.tls.certresolver=letsencrypt

        - traefik.http.routers.redirects.entrypoints=websecure
        - traefik.http.routers.redirects.service=static
        - "traefik.http.routers.redirects.rule=(Host(`pim.kunis.nl`) || Host(`concourse.pim.kunis.nl`) || Host(`rss.pim.kunis.nl`) || Host(`md.pim.kunis.nl`) || Host(`cloud.pim.kunis.nl`) || Host(`dav.pim.kunis.nl`) || Host(`git.pim.kunis.nl`))"
        - traefik.http.routers.redirects.tls=true
        - traefik.http.routers.redirects.tls.certresolver=letsencrypt