# Use with an appropriate .env file

services:
  app:
    image: git.kolkman.org/olaf/link-log:development  # or :latest  or a version-tag
    container_name: ${APP_CONTAINER_NAME:-linklog-app}
    volumes:
      - ./linklog_data:/app/backend/data
    environment:
      APP_ENV: ${APP_ENV:-production}
      LINKLOG_APP_NAME: ${LINKLOG_APP_NAME:-LinkLog}
      LINKLOG_DATABASE_PATH: ${LINKLOG_DATABASE_PATH:-/app/backend/data/linklog.db}
      LINKLOG_SECRET_KEY: ${LINKLOG_SECRET_KEY:?Set LINKLOG_SECRET_KEY in .env}
      LINKLOG_TOKEN_EXPIRY_MINUTES: ${LINKLOG_TOKEN_EXPIRY_MINUTES:-15}
      LINKLOG_REFRESH_TOKEN_EXPIRY_DAYS: ${LINKLOG_REFRESH_TOKEN_EXPIRY_DAYS:-30}
      LINKLOG_PUBLIC_URL: ${LINKLOG_PUBLIC_URL:-linklog.example.com}
      LINKLOG_SMTP_HOST: ${LINKLOG_SMTP_HOST:-smtp.example.com}
      LINKLOG_SMTP_PORT: ${LINKLOG_SMTP_PORT:-587}
      LINKLOG_SMTP_USERNAME: ${LINKLOG_SMTP_USERNAME:?Set LINKLOG_SMTP_USERNAME in .env}
      LINKLOG_SMTP_PASSWORD: ${LINKLOG_SMTP_PASSWORD:?Set LINKLOG_SMTP_PASSWORD in .env}
      LINKLOG_SMTP_FROM: ${LINKLOG_SMTP_FROM:-LinkLog <no-reply@example.com>}
      LINKLOG_SMTP_USE_TLS: ${LINKLOG_SMTP_USE_TLS:-true}
      LINKLOG_EMAIL_VERIFICATION_EXPIRY_HOURS: ${LINKLOG_EMAIL_VERIFICATION_EXPIRY_HOURS:-24}
      LINKLOG_PASSWORD_RESET_EXPIRY_HOURS: ${LINKLOG_PASSWORD_RESET_EXPIRY_HOURS:-1}
      LINKLOG_MASTODON_CLIENT_NAME: ${LINKLOG_MASTODON_CLIENT_NAME:-LinkLog}
      LINKLOG_MASTODON_OAUTH_EXPIRY_MINUTES: ${LINKLOG_MASTODON_OAUTH_EXPIRY_MINUTES:-10}
      LINKLOG_LOG_LEVEL: ${LINKLOG_LOG_LEVEL:-INFO}
      LINKLOG_TRACKING_PARAMS: ${LINKLOG_TRACKING_PARAMS:-}
    restart: ${APP_RESTART_POLICY:-unless-stopped}
    healthcheck:
      test: ["CMD", "python", "-c", "from urllib.request import urlopen; urlopen('http://127.0.0.1:8000/health', timeout=3)"]
      interval: ${APP_HEALTHCHECK_INTERVAL:-30s}
      timeout: ${APP_HEALTHCHECK_TIMEOUT:-5s}
      start_period: ${APP_HEALTHCHECK_START_PERIOD:-10s}
      retries: ${APP_HEALTHCHECK_RETRIES:-3}
    labels:
      traefik.enable: true
      traefik.http.middlewares.web-https-redirect.redirectscheme.scheme: https
      traefik.http.services.linklog.loadbalancer.server.port: 8000
      traefik.docker.network: linklog_traefik # network to be shared with traefik 


      traefik.http.routers.linklog.entrypoints: web
      traefik.http.routers.linklog.rule: Host(`${LINKLOG_PUBLIC_URL:-linklog.example.com}`)  # Make sure to change
      traefik.http.routers.linklog.middlewares: web-https-redirect,servicests # these middlewares must exist
      traefik.http.routers.linklog-secure.entrypoints: websecure  
      traefik.http.routers.linklog-secure.rule: Host(`${LINKLOG_PUBLIC_URL:-linklog.example.com}`) #Make sure to change
      traefik.http.routers.linklog-secure.tls: true
      traefik.http.routers.linklog-secure.middlewares: servicests

      traefik.http.routers.linklog-secure.tls.certresolver: myresolver # or your resovler, e.g certbot
      traefik.http.routers.linklog-secure.service: linklog