networks:
  proxy:
    external: true
  invoice-asu:

volumes:
  invoice-asu-db:
  invoice-asu-storage:
    name: invoice-asu-storage

services:
  app:
    image: gitea.steinle-computer.de/ri-st/project:latest
    restart: always
    dns:
      - '8.8.8.8'
    links:
      - pgsql
    depends_on:
      pgsql:
        condition: service_healthy
    working_dir: /var/www
    volumes:
      - ./.env:/var/www/.env
      - invoice-asu-storage:/var/www/storage/app/public
    networks:
      - proxy
      - invoice-asu
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.invoice-asu.rule=Host(`e-rechnung.arbeitsschutz-ulm.de`)"
      - "traefik.http.routers.invoice-asu.entrypoints=web"
      - "traefik.http.routers.invoice-asu.middlewares=invoice-asu"
      - "traefik.http.middlewares.invoice-asu.redirectscheme.scheme=https"
      - "traefik.http.routers.invoice-asu-secure.rule=Host(`e-rechnung.arbeitsschutz-ulm.de`)"
      - "traefik.http.routers.invoice-asu-secure.entrypoints=websecure"
      - "traefik.http.routers.invoice-asu-secure.tls=true"
      - "traefik.http.routers.invoice-asu-secure.tls.certresolver=cs"
      - "traefik.http.routers.invoice-asu-secure.service=invoice-asu-secure"
      - "traefik.http.services.invoice-asu-secure.loadbalancer.server.port=80"

  pgsql:
    image: postgres:17-alpine
    restart: unless-stopped
    volumes:
      - invoice-asu-db:/var/lib/postgresql/data
    networks:
      - invoice-asu
    environment:
      PGPASSWORD: h8d57T^aFfTk@X
      POSTGRES_PASSWORD: h8d57T^aFfTk@X
      POSTGRES_USER: asu
      POSTGRES_DB: asu
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U asu"]