docker-compose.yaml

---
version: "2"

services:
  api:
    image: ${DOCKER_USER}/deploy
    labels:
      traefik.http.routers.deploy-http.rule: Host(`deploy.vibioh.fr`)
      traefik.http.routers.deploy-http.entrypoints: http
      traefik.http.routers.deploy-http.middlewares: redirect@file
      traefik.http.routers.deploy-https.rule: Host(`deploy.vibioh.fr`)
      traefik.http.routers.deploy-https.entrypoints: https
      traefik.http.routers.deploy-https.middlewares: compress@file, web-limit@file, deploy-auth
      traefik.http.routers.deploy-https.tls: "true"
      traefik.http.routers.deploy-https.tls.certresolver: default
      traefik.http.services.deploy-service.loadbalancer.server.port: "1080"
      traefik.http.middlewares.deploy-auth.basicauth.removeheader: "true"
      traefik.http.middlewares.deploy-auth.basicauth.users: "${BASIC_USERS}"
    environment:
      DEPLOY_MAILER_URL: "${MAILER_URL}"
      DEPLOY_MAILER_USER: "${MAILER_USER}"
      DEPLOY_MAILER_PASS: "${MAILER_PASS}"
      DEPLOY_ANNOTATION_URL: "${ANNOTATION_URL}"
      DEPLOY_ANNOTATION_USER: "${ANNOTATION_USER}"
      DEPLOY_ANNOTATION_PASS: "${ANNOTATION_PASS}"
      DEPLOY_API_NOTIFICATION_EMAIL: "${NOTIFY_EMAIL}"
      DEPLOY_WRITE_TIMEOUT: "2m"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    restart: on-failure:5
    cpu_shares: 128
    mem_limit: 201326592
    user: "0"
    security_opt:
      - no-new-privileges