compose.yaml

include:
  - cloud/compose.yaml
  - media/compose.yaml

# service containers
name: service
services:

  watchtower:
    image: containrrr/watchtower:latest
    restart: always
    volumes: 
      - /var/run/docker.sock:/var/run/docker.sock:ro

  lldap:
    image: lldap/lldap:stable
    restart: always
    networks:
      - default
      - cloud
      - media
    expose:
      - 17170
    environment:
      - UID=33
      - GID=33
      - TZ=America/Chicago
      - LLDAP_LDAP_BASE_DN=dc=viggy96,dc=me
      - LLDAP_JWT_SECRET_FILE=/data/jwt_secret
    volumes:
      - /tank/container_data/lldap:/data 
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.lldap.loadbalancer.server.port=17170"
      - "traefik.http.routers.lldap.middlewares=private@file"

  traefik:
    image: traefik:latest
    restart: always
    networks:
      - default
      - cloud
      - media
    security_opt:
      - no-new-privileges:true
    environment:
      - TZ=America/Chicago
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./traefik/:/etc/traefik
    ports:
      - 80:80/tcp
      - 443:443/tcp
      - 443:443/udp
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.middlewares=private@file"
      - "traefik.http.routers.traefik.service=api@internal"

  www:
    image: viggy96/resume-website:latest
    restart: always
    environment:
      - ENV=production
    expose:
      - 443
    labels: 
      - "traefik.enable=true"
      - "traefik.http.services.www.loadbalancer.server.port=443"
      - "traefik.http.middlewares.www-rep.redirectregex.regex=^https://viggy96.me/(.*)"
      - "traefik.http.middlewares.www-rep.redirectregex.replacement=https://www.viggy96.me/$${1}"
      - "traefik.http.middlewares.www-rep.redirectregex.permanent=true"
      - "traefik.http.routers.www.middlewares=www-rep,secure@file"

  librespeed:
    image: linuxserver/librespeed:latest
    restart: always
    environment:
      - PUID=33
      - PGID=33
      - TZ=America/Chicago
      - PASSWORD=
    volumes:
      - /tank/container_data/librespeed:/config
    expose:
      - 80
    labels:
      - "traefik.enable=true"
      - "traefik.http.services.librespeed.loadbalancer.server.port=80"
      - "traefik.http.middlewares.librespeed-limit.buffering.maxRequestBodyBytes=10000000000"
      - "traefik.http.middlewares.librespeed-limit.buffering.memRequestBodyBytes=10000000000"
      - "traefik.http.middlewares.librespeed-limit.buffering.maxResponseBodyBytes=10000000000"
      - "traefik.http.middlewares.librespeed-limit.buffering.memResponseBodyBytes=10000000000"
      - "traefik.http.routers.librespeed.middlewares=librespeed-limit,private@file"

networks:
  cloud:
  media: