version: "3"

services:
  dawdle:
    build: .
    volumes:
      - ./:/data
    command: 
      - 'python'
      - '/data/dawdle.py'
      - '/data/af/dawdle.conf'
    restart: unless-stopped

  web:
    build: .
    volumes:
      - ./site:/site
    working_dir: /site
    restart: unless-stopped
    command: python manage.py runserver 0.0.0.0:8000
    networks:
      - web

  nginx:
    image: docker.io/library/nginx:stable-alpine
    volumes:
      - ./site/static:/usr/share/nginx/html:ro
      - ./nginx.conf.template:/etc/nginx/templates/default.conf.template
    restart: unless-stopped
    networks:
      - web
    labels:
      - traefik.enable=true
      - traefik.http.middlewares.https-compress-ircl3.compress=true

      - traefik.http.middlewares.header_ircl3.headers.sslRedirect=true
      - traefik.http.middlewares.header_ircl3.headers.sslHost=irc.l3.lv
      - traefik.http.middlewares.header_ircl3.headers.stsSeconds=3600
      - traefik.http.middlewares.header_ircl3.headers.stsPreload=true
      - traefik.http.middlewares.header_ircl3.headers.forceSTSHeader=true
      - traefik.http.middlewares.header_ircl3.headers.frameDeny=true
      - traefik.http.middlewares.header_ircl3.headers.contentTypeNosniff=true
      - traefik.http.middlewares.header_ircl3.headers.customRequestHeaders.Cache-Control='public, max-age=3600'

      - traefik.http.routers.ircl3.rule=Host(`irc.l3.lv`)
      - traefik.http.routers.ircl3.tls=true
      - traefik.http.routers.ircl3.tls.certresolver=le
      - traefik.http.routers.ircl3.entrypoints=secure
      - traefik.http.routers.ircl3.middlewares=header_ircl3,https-compress-ircl3
      - traefik.http.services.ircl3.loadbalancer.server.port=80

      - traefik.http.routers.ircl3_http.rule=Host(`irc.l3.lv`)
      - traefik.http.routers.ircl3_http.service=ircl3
      - traefik.http.routers.ircl3_http.entrypoints=web
      - traefik.http.routers.ircl3_http.middlewares=header_ircl3,https-compress-ircl3

networks:
  web:
    external: true