---
services:
  koito:
    image: gabehf/koito:${KOITO_VERSION}
    container_name: koito
    depends_on:
      - db
    networks:
      - traefik
      - koito
    environment:
      - KOITO_DATABASE_URL=postgres://postgres:${KOITO_DB_PASSWORD}@db:5432/koitodb?sslmode=disable
      - KOITO_ALLOWED_HOSTS=${KOITO_DOMAIN}
    volumes:
      - ./data/koito:/etc/koito
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=traefik"
      - "traefik.http.routers.koito.entrypoints=http"
      - "traefik.http.routers.koito.rule=Host(`${KOITO_DOMAIN}`)"
      - "traefik.http.middlewares.koito-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.koito.middlewares=koito-https-redirect"
      - "traefik.http.routers.koito-secure.entrypoints=https"
      - "traefik.http.routers.koito-secure.rule=Host(`${KOITO_DOMAIN}`)"
      - "traefik.http.routers.koito-secure.tls=true"
      - "traefik.http.routers.koito-secure.service=koito"
      - "traefik.http.services.koito.loadbalancer.server.port=4110"
    restart: unless-stopped

  db:
    image: postgres:16
    container_name: koito-db
    restart: unless-stopped
    networks:
      - koito
    environment:
      POSTGRES_DB: koitodb
      POSTGRES_USER: postgres
      POSTGRES_PASSWORD: ${KOITO_DB_PASSWORD}
    volumes:
      - ./data/db:/var/lib/postgresql/data

networks:
  traefik:
    external: true
  koito:
    driver: bridge