version: "3.8"

services:
  site-support:
    image: git.sofus.io/so-rose/site-support:0
    user: "5020:5020"
    cap_drop:
      - ALL
    
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
    
    configs:
      - source: site-support__security.txt
        target: /public/.well-known/security.txt
        uid: "5020"
        gid: "5020"

    environment:
      SERVER_PORT: "8787"
      SERVER_REDIRECT_TRAILING_SLASH: "true"
        
      SERVER_LOG_LEVEL: "info"
      SERVER_LOG_REMOTE_ADDRESS: "false"
        
      SERVER_THREADS_MULTIPLIER: "0" ## Use # CPUs
      
      SERVER_SECURITY_HEADERS: "true"
      SERVER_DIRECTORY_LISTING: "false"
      
      SERVER_CACHE_CONTROL_HEADERS: "false" ## change when stable?
      SERVER_COMPRESSION: "true" ## reconsider for small ssg payload
      SERVER_COMPRESSION_STATIC: "false" ## pre-compress? :)
    
    deploy:
      mode: replicated
      replicas: 1
      
#      resources:
#        limits:
#          cpus: "4.0"
#          memory: "4G"
      
      restart_policy:
        condition: on-failure
        delay: 5s
        max_attempts: 3
        window: 120s

    networks:
      - mesh_public

configs:
  site-support__security.txt:
    external: true

networks:
  mesh_public:
    external: true