docker-compose.prod.yml

version: '3.9'
services:
  theflashback:
    image: ghcr.io/jimmylevell/theflashback/theflashback:latest
    networks:
      - traefik-public
    secrets:
      - SMTP_GMAIL_USER
      - SMTP_GMAIL_PASSWORD
    deploy:
      replicas: 1
      update_config:
        parallelism: 1
        delay: 10s
      restart_policy:
        condition: on-failure
      labels:
        - traefik.enable=true # enable traefik
        - traefik.docker.network=traefik-public # put it in the same network as traefik
        - traefik.constraint-label=traefik-public # assign the same label as traefik so it can be discovered
        - traefik.http.routers.theflashback.rule=Host(`theflashback.ch`) # listen to port 80 for request to APP_DOMAIN (use together with the line below)
        - traefik.http.routers.theflashback.entrypoints=http
        - traefik.http.middlewares.theflashback.redirectscheme.scheme=https # redirect traffic to https
        - traefik.http.middlewares.theflashback.redirectscheme.permanent=true # redirect traffic to https
        - traefik.http.routers.theflashback-secured.rule=Host(`theflashback.ch`) # listen to port 443 for request to APP_DOMAIN (use together with the line below)
        - traefik.http.routers.theflashback-secured.entrypoints=https
        - traefik.http.routers.theflashback-secured.tls.certresolver=le # use the Let's Encrypt certificate we set up earlier
        - traefik.http.services.theflashback-secured.loadbalancer.server.port=80 # ask Traefik to search for port service container

networks:
  traefik-public:
    external: true

secrets:
  SMTP_GMAIL_USER:
    external: true
  SMTP_GMAIL_PASSWORD:
    external: true