services:
  idrs-api:
    image: git.proit.id/proitlab/idrs-api:latest
    environment:
      ADMIN_USERNAME: 
      ADMIN_PASSWORD: 
      IDRS_PUBLIC_URL: https://idrs.databisnis.id
      FORWARDED_ALLOW_IPS: "*"
    volumes:
      - /mnt/nfs/server5.saltis.id/data/idrs/data:/app/data
      - /mnt/nfs/server5.saltis.id/data/idrs/static:/app/app/static
    networks:
      - traefik-net
    deploy:
      placement:
        constraints:
          - node.hostname != server2U
      restart_policy:
        condition: any
      labels:
        - traefik.enable=true
        - traefik.http.routers.idrs-api.rule=Host(`idrs.databisnis.id`)
        - traefik.http.routers.idrs-api.entrypoints=websecure
        - traefik.http.routers.idrs-api.tls.certresolver=letsencrypt
        - traefik.http.services.idrs-api.loadbalancer.server.port=8000
        - id.proit.routing=mvnet

networks:
  traefik-net:
    external: true