version: '3.9'

services:
  vandam:
    image: ghcr.io/floppy/van_dam@sha256:c076f85cc1360dbdb33bbcfc8d4d1747779b04dee8734cff827bbe858ab01f58
    container_name: vandam_vandam
    env_file:
      - path: ./vandam_secrets.env
        required: false
    volumes:
      - ${STL_DIR}:/libraries
    networks:
      - web
      - vandam
    labels:
      - traefik.http.routers.vandam.rule=Host(`3d.jafner.net`)
      - traefik.http.routers.vandam.tls.certresolver=lets-encrypt
      - traefik.http.routers.vandam.middlewares=traefik-forward-auth@file
    depends_on:
      - db
      - redis

  db:
    image: postgres@sha256:4b4da96c37fefd6f28c3f58e7470bbc6d2cb34ac5641b9df7221d962eb4bc55d # should be :13
    container_name: vandam_postgres
    networks:
      - vandam
    env_file:
      - path: ./db_secrets.env
        required: false
    volumes:
      - db_data:/var/lib/postgresql/data

  redis:
    image: redis@sha256:1b503bb77079ba644371969e06e1a6a1670bb34c2251107c0fc3a21ef9fdaeca # should be :6
    networks:
      - vandam
    container_name: vandam_redis

volumes:
  db_data:

networks:
  web:
    external: true
  vandam: