services:

  toolbox:
    container_name: ${PROJECT}
    restart: always
    build:
      context: .
      dockerfile: Dockerfile
    image: ${PROJECT}:latest
    networks:
      - my-net
    environment:
      - TZ=${TZ}
      - DB_HOST=${DB_HOST}
      - DB_PORT=${DB_PORT}
      - DB_NAME=${DB_NAME}
      - DB_USER=${DB_USER}
      - DB_PASS=${DB_PASS}
      - APP_SECRET=${APP_SECRET}
      - APP_ENV=${APP_ENV}
    labels:
      - "traefik.enable=true"

      # HTTPS router
      - "traefik.http.routers.${PROJECT}.rule=Host(`toolbox.nazv.ru`)"
      - "traefik.http.routers.${PROJECT}.entrypoints=websecure"
      - "traefik.http.routers.${PROJECT}.tls=true"
      - "traefik.http.routers.${PROJECT}.tls.certresolver=letsencrypt"

      # service
      - "traefik.http.services.${PROJECT}.loadbalancer.server.port=8080"

      # middleware
      - "traefik.http.routers.${PROJECT}.middlewares=my-fail2ban@file"
networks:
  my-net:
    external: true