services:
  kalulu:
    image: kalulu-web:3.0.1-fr-joy-fast
    build:
      context: .
      dockerfile: Dockerfile
    container_name: kalulu-web
    restart: unless-stopped
    networks:
      - traefik_proxy
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik_proxy
      - traefik.http.routers.kalulu.rule=Host(`kalulu.agendx.ch`)
      - traefik.http.routers.kalulu.entrypoints=websecure
      - traefik.http.routers.kalulu.tls=true
      - traefik.http.routers.kalulu.tls.certresolver=myresolver
      - traefik.http.routers.kalulu.middlewares=crowdsec-bouncer@docker
      - traefik.http.services.kalulu.loadbalancer.server.port=8080
    security_opt:
      - no-new-privileges:true

networks:
  traefik_proxy:
    external: true