version: '3'
services:
  meshcentral:
    image: typhonragewind/meshcentral:latest
    networks:
      - traefik_backend
    ports:
      - 8086:443
    environment:
      - HOSTNAME=${MESHCENTRAL_HOST}
      - REVERSE_PROXY=10.0.0.0/8
      - REVERSE_PROXY_TLS_PORT=443
      - IFRAME=false
      - ALLOW_NEW_ACCOUNTS=false
      - WEBRTC=false
      - BACKUPS_PW=${BACKUPS_PW}
      - BACKUP_INTERVAL=24
      - BACKUP_KEEP_DAYS=10
    volumes:
      - /volume1/docker/meshcentral/data:/opt/meshcentral/meshcentral-data
      - /volume1/docker/meshcentral/user_files:/opt/meshcentral/meshcentral-files
      - /volume1/docker/meshcentral/backups:/opt/meshcentral/meshcentral-backups
    deploy:
      labels:
        - traefik.enable=true
        - traefik.http.routers.meshcentral.rule=Host(`${MESHCENTRAL_HOST}`)
        - traefik.http.routers.meshcentral.tls=true
        - traefik.http.routers.meshcentral.tls.certresolver=letsencrypt
        - traefik.http.routers.meshcentral.entrypoints=websecure
        - traefik.http.services.meshcentral.loadbalancer.server.port=443
        - traefik.http.routers.meshcentral.middlewares=crowdsec@file
        - traefik.swarm.network=traefik_backend
        - traefik.http.services.meshcentral.loadbalancer.server.scheme=http

networks:
    traefik_backend:
       external: true