# version: '3.7'
# services:
#   db:
#     restart: always
#     image: postgres:14-alpine
#     shm_size: 256mb
#     networks:
#       - internal_network
#     healthcheck:
#       test: ['CMD', 'pg_isready', '-U', 'postgres']
#     volumes:
#       - ./postgres14:/var/lib/postgresql/data
#     environment:
#       - 'POSTGRES_HOST_AUTH_METHOD=trust'

#   redis:
#     restart: always
#     image: redis:7-alpine
#     networks:
#       - internal_network
#     healthcheck:
#       test: ['CMD', 'redis-cli', 'ping']
#     volumes:
#       - ./redis:/data

#   web:
#     image: ghcr.io/glitch-soc/mastodon
#     restart: always
#     env_file: .env.production
#     command: bash -c "rm -f /mastodon/tmp/pids/server.pid; bundle exec rails s -p 3000"
#     networks:
#       - traefik
#       - internal_network
#     healthcheck:
#       # prettier-ignore
#       test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:3000/health || exit 1']
#     depends_on:
#       - db
#       - redis
#       # - es
#     volumes:
#       - ./public/system:/mastodon/public/system
#     labels: 
#       - "traefik.enable=true"
#       # Main Web Router
#       - "traefik.http.routers.mstdn-web-rtr.entrypoints=websecure"
#       - "traefik.http.routers.mstdn-web-rtr.rule=Host(`kvist.knast.cc`)"
#       - "traefik.http.routers.mstdn-web-rtr.tls=true"
#       - "traefik.http.routers.mstdn-web-rtr.tls.certResolver=letsencr"
#       # Media Router
#       - "traefik.http.routers.mstdn-media-rtr.entrypoints=websecure"
#       - "traefik.http.routers.mstdn-media-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/system/media_attachments/`))"
#       - "traefik.http.routers.mstdn-media-rtr.tls=true"
#       - "traefik.http.routers.mstdn-media-rtr.tls.certResolver=letsencr"
#       - "traefik.http.routers.mstdn-media-rtr.middlewares=mstdn-cors-media"
#       # CORS Middleware
#       - "traefik.http.middlewares.mstdn-cors-media.headers.contentSecurityPolicy=img-src *; media-src *;"
#       - "traefik.http.middlewares.mstdn-cors-media.headers.accesscontrolallowheaders=*"
#       - "traefik.http.middlewares.mstdn-cors-media.headers.accessControlAllowOriginList=*"
#       # Service
#       - "traefik.http.services.mstdn-web-svc.loadbalancer.server.port=3000"

#   streaming:
#     image: ghcr.io/glitch-soc/mastodon
#     restart: always
#     env_file: .env.production
#     command: node ./streaming
#     networks:
#       - traefik
#       - internal_network
#     healthcheck:
#       # prettier-ignore
#       test: ['CMD-SHELL', 'wget -q --spider --proxy=off localhost:4000/api/v1/streaming/health || exit 1']
#     depends_on:
#       - db
#       - redis
#     labels: 
#       - "traefik.enable=true"
#       - "traefik.http.routers.mstdn-streamer-rtr.entrypoints=websecure"
#       - "traefik.http.routers.mstdn-streamer-rtr.rule=(Host(`kvist.knast.cc`) && PathPrefix(`/api/v1/streaming`))"
#       - "traefik.http.routers.mstdn-streamer-rtr.tls=true"
#       - "traefik.http.routers.mstdn-streamer-rtr.tls.certResolver=letsencr"
#       - "traefik.http.services.mstdn-streamer-svc.loadbalancer.server.port=4000"

#   sidekiq:
#     image: ghcr.io/glitch-soc/mastodon
#     restart: always
#     env_file: .env.production
#     command: bundle exec sidekiq
#     depends_on:
#       - db
#       - redis
#     networks:
#       - traefik
#       - internal_network
#     volumes:
#       - ./public/system:/mastodon/public/system
#     healthcheck:
#       test: ['CMD-SHELL', "ps aux | grep '[s]idekiq\ 6' || false"]

# networks:
#   traefik:
#     name: traefik
#     external: true
#   internal_network:
#     internal: true