docker-compose.yaml

version: '3.2'

services:
  donator-auth:
    image: container.ldtteam.com/ldtteam/donator-auth:latest
    networks:
      - internal
      - traefik-public
    environment:
      - ASPNETCORE_ENVIRONMENT=Production
      - DOTNET_PRINT_TELEMETRY_MESSAGE=false
    volumes:
      - /opt/share/ldtteam-donator-auth/appsettings.json:/app/appsettings.json
      - /opt/share/ldtteam-donator-auth/privateKey.pem:/app/privateKey.pem
    deploy:
      placement:
        constraints:
          - node.labels.type==worker
          - node.labels.system==production
          - node.labels.usecase==donator-auth
      labels:
        - traefik.enable=true
        - traefik.constraint-label=traefik-public
        - traefik.docker.network=traefik-public
        - traefik.http.middlewares.https-redirect.redirectscheme.scheme=https
        - traefik.http.middlewares.https-redirect.redirectscheme.permanent=true
        - traefik.http.routers.donator-auth-http.rule=Host(`auth.minecolonies.com`)
        - traefik.http.routers.donator-auth-http.entrypoints=http
        - traefik.http.routers.donator-auth-http.middlewares=https-redirect
        - traefik.http.routers.donator-auth-https.rule=Host(`auth.minecolonies.com`)
        - traefik.http.routers.donator-auth-https.entrypoints=https
        - traefik.http.routers.donator-auth-https.tls=true
        - traefik.http.routers.donator-auth-https.service=donator-auth
        - traefik.http.routers.donator-auth-https.tls.certresolver=le-wc
        - traefik.http.services.donator-auth.loadbalancer.server.port=80

  postgres:
    image: postgres:13.3
    networks:
      - internal
    environment:
      - POSTGRES_PASSWORD=password
    volumes:
      - /opt/share/ldtteam-donator-auth/data:/var/lib/postgresql/data
    deploy:
      placement:
        constraints:
          - node.labels.type==worker
          - node.labels.system==production
          - node.labels.usecase==donator-auth

networks:
  internal:
  traefik-public:
    external: true