services:

  toolbox:
    container_name: ${PROJECT}
    restart: always
    build:
      context: .
      dockerfile: Dockerfile
    image: ${PROJECT}:latest
    networks:
      - my-net
    env_file:
      - ${ENV_FILE}.env
    labels:
      - "traefik.enable=true"

      # HTTPS router
      - "traefik.http.routers.${PROJECT}.rule=Host(`toolbox.nazv.ru`)"
      - "traefik.http.routers.${PROJECT}.entrypoints=websecure"
      - "traefik.http.routers.${PROJECT}.tls=true"
      - "traefik.http.routers.${PROJECT}.tls.certresolver=letsencrypt"

      # middleware
      - "traefik.http.routers.${PROJECT}.middlewares=my-fail2ban@file"

      # service
      - "traefik.http.services.${PROJECT}.loadbalancer.server.port=8080"
networks:
  my-net:
    external: true