compose-thecybersociety.yml

version: '3'

networks:
  traefik-public-net:
    external: true

services:
  web:
    image: ghcr.io/vincentbenzo/thecybersociety:latest
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik-public-net
      - traefik.http.routers.thecybersociety-http.rule=Host(`www.thecybersociety.io`) || Host(`thecybersociety.io`)
      - traefik.http.routers.thecybersociety-http.entrypoints=http
      - traefik.http.middlewares.httptohttps.redirectscheme.scheme=https
      - traefik.http.middlewares.httptohttps.redirectscheme.permanent=true
      - traefik.http.routers.thecybersociety-http.middlewares=httptohttps
      - traefik.http.routers.thecybersociety-https.rule=Host(`www.thecybersociety.io`) || Host(`thecybersociety.io`)
      - traefik.http.routers.thecybersociety-https.entrypoints=https
      - traefik.http.middlewares.www-to-non-www.redirectregex.regex=^https?://www.thecybersociety.io/(.*)
      - traefik.http.middlewares.www-to-non-www.redirectregex.replacement=https://thecybersociety.io/$${1}
      - traefik.http.middlewares.www-to-non-www.redirectregex.permanent=true
      - traefik.http.routers.thecybersociety-https.middlewares=www-to-non-www
      - traefik.http.routers.thecybersociety-https.tls.certresolver=dnschallengecloudflare
      - traefik.http.routers.thecybersociety-https.tls.domains[0].main=*.thecybersociety.io
      - traefik.http.routers.thecybersociety-https.tls.domains[0].sans=thecybersociety.io
      - traefik.http.routers.thecybersociety-https.service=thecybersociety
      - traefik.http.services.thecybersociety.loadbalancer.server.port=80
      - "com.centurylinklabs.watchtower.enable=true"
    networks:
      - traefik-public-net
    healthcheck:
      test: ["CMD", "nginx", "-t"]
      interval: 30s
      timeout: 10s
      retries: 3
    restart: unless-stopped