version: "3.9"

services:
  serene-docs:
    image: snowd4zzle/deliciousium
    environment:
      USER_UID: 1100
      USER_GID: 1100
    security_opt:
      - no-new-privileges:true
    networks:
      - public_lb
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock

    deploy:
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.delic.rule=Host(`deliciousium.com`)"
        - "traefik.http.routers.delic.entrypoints=websecure"
        - "traefik.http.routers.delic.tls=true"
        - "traefik.http.routers.delic.tls.certresolver=default"
        - "traefik.http.services.delic-web.loadbalancer.server.port=3000"
        - "traefik.http.services.delic-web.loadbalancer.server.scheme=http"
        - "traefik.http.routers.delic.service=delic-web"
        - "traefik.docker.network=public_lb"
        - "traefik.http.middlewares.delic-ratelimit.ratelimit.average=50"
        - "traefik.http.middlewares.delic-ratelimit.ratelimit.burst=10"
        - "traefik.http.routers.delic.middlewares=delic-ratelimit"
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure
        max_attempts: 3
      update_config:
        parallelism: 1
        delay: 5s
        order: stop-first

    logging:
      options:
        max-size: "10m"
        max-file: "3"

networks:
  public_lb:
    external: true
    name: public_lb