networks:
  {{ traefik_public_net }}:
    external: true

services:
  web:
    image: ghcr.io/basecamp/fizzy:main
    restart: unless-stopped
    environment:
      - SECRET_KEY_BASE=abcdefabcdef
      # - TLS_DOMAIN={{ fizzy_domain }}
      - BASE_URL=https://{{ fizzy_domain }}
      - MAILER_FROM_ADDRESS={{ fizzy_from_address }}
      - SMTP_ADDRESS={{ fizzy_smtp_address }}
      - SMTP_USERNAME={{ fizzy_smtp_username }}
      - SMTP_PASSWORD={{ fizzy_smtp_password }}
      - VAPID_PRIVATE_KEY=myvapidprivatekey
      - VAPID_PUBLIC_KEY=myvapidpublickey
    volumes:
      - {{ data_dir }}/data/storage:/rails/storage
    networks:
      - {{ traefik_public_net }}
    deploy:
      mode: replicated
      replicas: 1
      labels:
        - "traefik.enable=true"
        - "traefik.docker.network={{ traefik_public_net }}"
        - "traefik.http.routers.fizzy.rule=Host(`{{ fizzy_domain }}`)"
        - "traefik.http.routers.fizzy.entrypoints=https"
        - "traefik.http.routers.fizzy.tls.certresolver=main"
        - "traefik.http.services.fizzy.loadbalancer.server.port=80"