version: "3.8"

services:
  site-support:
    image: git.sofus.io/python-support/site-support:0
    user: "5020:5020"
    
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
    
    configs:
      - source: site-support__security.txt
        target: /app/.well-known/security.txt

    environment:
      SERVER_PORT: "8787"
      SERVER_ROOT: "/app"
      SERVER_REDIRECT_TRAILING_SLASH: "true"
        
      SERVER_LOG_LEVEL: "trace"
      SERVER_LOG_REMOTE_ADDRESS: "false"
      
      SERVER_SECURITY_HEADERS: "false"
      SERVER_DIRECTORY_LISTING: "false"
      
      SERVER_CACHE_CONTROL_HEADERS: "false" ## change when stable?
      SERVER_COMPRESSION: "false" ## reconsider for small ssg payload
      SERVER_COMPRESSION_STATIC: "false" ## pre-compress? :)
    
    deploy:
      mode: replicated
      replicas: 1
      
      resources:
        limits:
          cpus: "1.0"
          memory: "750M"
      
      restart_policy:
        condition: on-failure
        delay: 5s
        max_attempts: 3
        window: 120s

    networks:
      public:
        ipv4_address: "10.99.88.3"

configs:
  site-support__security.txt:
    external: true

networks:
  public:
    external: true