services:
  hedgedoc:
    image: quay.io/hedgedoc/hedgedoc:1.9.6-alpine
    container_name: hedgedoc_web
    depends_on:
      - db
    restart: unless-stopped
    networks:
      - traefik_proxy
      - backend
    env_file: .env-hedgedoc
    environment:
      - NODE_ENV=production
      - CMD_DOMAIN=n.fanyx.xyz
      - CMD_PROTOCOL_USESSL=true
      - CMD_ALLOW_ANONYMOUS=false
      - CMD_ALLOW_ANONYMOUS_EDITS=true
      - CMD_ALLOW_FREEURL=true
      - CMD_REQUIRE_FREEURL_AUTHENTICATION=true
      - CMD_EMAIL=true
      - CMD_ALLOW_EMAIL_REGISTER=false
    volumes:
      - /var/docker/hedgedoc/uploads:/hedgedoc/public/uploads
    labels:
      traefik.enable: "true"
      traefik.http.routers.hedgedoc.entrypoints: "https"
      traefik.http.routers.hedgedoc.rule: "Host(`n.fanyx.xyz`)"
      traefik.http.routers.hedgedoc-ws.entrypoints: "https"
      traefik.http.routers.hedgedoc-ws.rule: "Host(`n.fanyx.xyz`) && Path(`/sockets.io/`)"
      traefik.http.middlewares.wsUpgrade.headers.customrequestheaders.X-Forwarded-Proto: "https"
      traefik.http.routers.hedgedoc-ws.middlewares: "wsUpgrade@docker"
  db:
    image: postgres:13.4-alpine
    container_name: hedgedoc_db
    restart: unless-stopped
    env_file: .env-db
    networks:
      - backend
    volumes:
      - /var/docker/hedgedoc/database:/var/lib/postgresql/data

networks:
  traefik_proxy:
    name: traefik_proxy
  backend: