version: "3.2"
services:
    proxy:
        image: hub.andrewalliance.com/releases/nginx:1.29.5-alpine
        ports:
            - target: 80
              published: 80
              protocol: tcp
              mode: host
            - target: 443
              published: 443
              protocol: tcp
              mode: host
        volumes:
            - ./../ssl:/etc/nginx/ssl
            - ./not-supported.html:/usr/onelab/not-supported.html
            - ./error-404.html:/usr/onelab/error-404.html
            - ./proxy.conf:/etc/nginx/nginx.conf
            - ./custom-http.conf:/etc/nginx/custom-http.conf
            - ./custom-server.conf:/etc/nginx/custom-server.conf
        extra_hosts:
            - "host.docker.internal:host-gateway"
        deploy:
          replicas: 1
          placement:
            constraints:
              - node.role == manager
{% if docker_secrets is defined and "ssl_passphrase" in docker_secrets.stdout_lines %}
        secrets:
          - ssl_passphrase
{% endif %}
    maintenance:
        image: hub.andrewalliance.com/releases/nginx:1.29.5-alpine
        volumes:
            - ./maintenance.html:/usr/onelab/index.html
            - ./maintenance.conf:/etc/nginx/conf.d/default.conf
        deploy:
          replicas: 1
          placement:
            constraints:
              - node.role == manager
{% if docker_secrets is defined and "ssl_passphrase" in docker_secrets.stdout_lines %}
secrets:
  ssl_passphrase:
    external: true
{% endif %}