services:
  db:
    image: mysql
    restart: unless-stopped
    platform: linux/x86_64
    volumes:
      - ./mysql/data:/var/lib/mysql
    env_file: mysql/default.env
    cap_add:
      - SYS_NICE
    #    ports:
    #      - 3306:3306
    networks:
      - default

  broker:
    image: redis
    restart: unless-stopped
    #    ports:
    #      - 6379:6379
    networks:
      - default

  service:
    image: fleetdm/fleet
    restart: unless-stopped
    labels:
      - traefik.enable=true
      - traefik.http.routers.fleet.entrypoints=websecure
      - traefik.http.routers.fleet.rule=Host(`fleet.rskio.com`)
      - traefik.http.routers.fleet.middlewares=secureHeaders@file
      - traefik.http.routers.fleet.tls=true
      - traefik.http.routers.fleet.tls.options=external@file
      - traefik.http.routers.fleet.service=fleet@docker
      - traefik.http.services.fleet.loadbalancer.server.port=8412
      - traefik.http.routers.fleet.tls.certresolver=rskio_certresolver
    depends_on:
      - db
      - broker
    platform: linux/x86_64
    command: sh -c "/usr/bin/fleet prepare db --no-prompt && /usr/bin/fleet serve"
    env_file: fleet/default.env
    ports:
      - 8412:8412
    volumes:
      - ./fleet:/fleet/
      - ./fleet/logs:/logs
      - ./fleet/vulndb:/vulndb
    networks:
      - default
      - traefik

networks:
  default: {}
  traefik:
    external: true