services:
  landing:
    image: ${KIT_LANDING_IMAGE:-ghcr.io/valknarness/kit-ui:latest}
    container_name: ${KIT_COMPOSE_PROJECT_NAME}_landing
    restart: unless-stopped
    networks:
      - compose_network
    labels:
      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
      # HTTP to HTTPS redirect
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-landing-redirect-web-secure.redirectscheme.scheme=https'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-landing-redirect-web-secure'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web.rule=Host(`${KIT_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web.entrypoints=web'
      # HTTPS router
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web-secure.rule=Host(`${KIT_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web-secure.tls.certresolver=resolver'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web-secure.entrypoints=web-secure'
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-landing-compress.compress=true'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-landing-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-landing-compress,security-headers@file'
      # Service
      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-landing.loadbalancer.server.port=80'
      - 'traefik.docker.network=${NETWORK_NAME}'
      # Watchtower
      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'

  vert:
    image: ${KIT_VERT_IMAGE:-ghcr.io/vert-sh/vert:latest}
    container_name: ${KIT_COMPOSE_PROJECT_NAME}_vert
    restart: unless-stopped
    environment:
      PUB_HOSTNAME: ${KIT_VERT_TRAEFIK_HOST}
      PUB_ENV: production
      PUB_DISABLE_ALL_EXTERNAL_REQUESTS: true
    networks:
      - compose_network
    labels:
      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
      # HTTP to HTTPS redirect
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-vert-redirect-web-secure.redirectscheme.scheme=https'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-vert-redirect-web-secure'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web.rule=Host(`${KIT_VERT_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web.entrypoints=web'
      # HTTPS router with auth
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web-secure.rule=Host(`${KIT_VERT_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web-secure.tls.certresolver=resolver'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web-secure.entrypoints=web-secure'
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-vert-compress.compress=true'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-vert-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-vert-compress,security-headers@file'
      # Service
      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-vert.loadbalancer.server.port=80'
      - 'traefik.docker.network=${NETWORK_NAME}'
      # Watchtower
      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'

  pastel_api:
    image: ${KIT_PASTEL_API_IMAGE:-ghcr.io/valknarness/pastel-api:latest}
    container_name: ${KIT_COMPOSE_PROJECT_NAME}_pastel_api
    restart: unless-stopped
    healthcheck:
      disable: true
    networks:
      - compose_network
    labels:
      # Watchtower
      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'

  pastel_ui:
    image: ${KIT_PASTEL_UI_IMAGE:-ghcr.io/valknarness/pastel-ui:latest}
    container_name: ${KIT_COMPOSE_PROJECT_NAME}_pastel_ui
    restart: unless-stopped
    healthcheck:
      disable: true
    environment:
      PASTEL_API_URL: http://pastel_api:3000
    networks:
      - compose_network
    labels:
      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
      # HTTP to HTTPS redirect
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-redirect-web-secure.redirectscheme.scheme=https'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-redirect-web-secure'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web.rule=Host(`${KIT_PASTEL_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web.entrypoints=web'
      # HTTPS router
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web-secure.rule=Host(`${KIT_PASTEL_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web-secure.tls.certresolver=resolver'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web-secure.entrypoints=web-secure'
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-compress.compress=true'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-pastel-ui-compress,security-headers@file'
      # Service
      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-pastel-ui.loadbalancer.server.port=3000'
      - 'traefik.docker.network=${NETWORK_NAME}'
      # Watchtower
      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'

  stirling:
    image: ${KIT_STIRLING_IMAGE:-frooodle/s-pdf:latest}
    container_name: ${KIT_COMPOSE_PROJECT_NAME}_stirling
    restart: unless-stopped
    networks:
      - compose_network
    labels:
      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
      # HTTP to HTTPS redirect
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-stirling-redirect-web-secure.redirectscheme.scheme=https'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-stirling-redirect-web-secure'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web.rule=Host(`${KIT_STIRLING_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web.entrypoints=web'
      # HTTPS router
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web-secure.rule=Host(`${KIT_STIRLING_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web-secure.tls.certresolver=resolver'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web-secure.entrypoints=web-secure'
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-stirling-compress.compress=true'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-stirling-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-stirling-compress,security-headers@file'
      # Service
      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-stirling.loadbalancer.server.port=8080'
      - 'traefik.docker.network=${NETWORK_NAME}'
      # Watchtower
      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'

  units:
    image: ${KIT_UNITS_IMAGE:-ghcr.io/valknarness/units-ui:latest}
    container_name: ${KIT_COMPOSE_PROJECT_NAME}_units
    restart: unless-stopped
    healthcheck:
      disable: true
    networks:
      - compose_network
    labels:
      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
      # HTTP to HTTPS redirect
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-units-redirect-web-secure.redirectscheme.scheme=https'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-units-redirect-web-secure'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web.rule=Host(`${KIT_UNITS_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web.entrypoints=web'
      # HTTPS router
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web-secure.rule=Host(`${KIT_UNITS_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web-secure.tls.certresolver=resolver'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web-secure.entrypoints=web-secure'
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-units-compress.compress=true'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-units-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-units-compress,security-headers@file'
      # Service
      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-units.loadbalancer.server.port=80'
      - 'traefik.docker.network=${NETWORK_NAME}'
      # Watchtower
      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'

  draw:
    image: ${KIT_DRAW_IMAGE:-excalidraw/excalidraw:latest}
    container_name: ${KIT_COMPOSE_PROJECT_NAME}_draw
    restart: unless-stopped
    healthcheck:
      disable: true
    networks:
      - compose_network
    labels:
      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
      # HTTP to HTTPS redirect
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-draw-redirect-web-secure.redirectscheme.scheme=https'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-draw-redirect-web-secure'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web.rule=Host(`${KIT_DRAW_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web.entrypoints=web'
      # HTTPS router
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web-secure.rule=Host(`${KIT_DRAW_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web-secure.tls.certresolver=resolver'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web-secure.entrypoints=web-secure'
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-draw-compress.compress=true'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-draw-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-draw-compress,security-headers@file'
      # Service
      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-draw.loadbalancer.server.port=80'
      - 'traefik.docker.network=${NETWORK_NAME}'
      # Watchtower
      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'

  figlet:
    image: ${KIT_FIGLET_IMAGE:-ghcr.io/valknarness/figlet-ui:latest}
    container_name: ${KIT_COMPOSE_PROJECT_NAME}_figlet
    restart: unless-stopped
    healthcheck:
      disable: true
    networks:
      - compose_network
    labels:
      - 'traefik.enable=${KIT_TRAEFIK_ENABLED}'
      # HTTP to HTTPS redirect
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-figlet-redirect-web-secure.redirectscheme.scheme=https'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web.middlewares=${KIT_COMPOSE_PROJECT_NAME}-figlet-redirect-web-secure'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web.rule=Host(`${KIT_FIGLET_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web.entrypoints=web'
      # HTTPS router
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web-secure.rule=Host(`${KIT_FIGLET_TRAEFIK_HOST}`)'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web-secure.tls.certresolver=resolver'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web-secure.entrypoints=web-secure'
      - 'traefik.http.middlewares.${KIT_COMPOSE_PROJECT_NAME}-figlet-compress.compress=true'
      - 'traefik.http.routers.${KIT_COMPOSE_PROJECT_NAME}-figlet-web-secure.middlewares=${KIT_COMPOSE_PROJECT_NAME}-figlet-compress,security-headers@file'
      # Service
      - 'traefik.http.services.${KIT_COMPOSE_PROJECT_NAME}-figlet.loadbalancer.server.port=80'
      - 'traefik.docker.network=${NETWORK_NAME}'
      # Watchtower
      - 'com.centurylinklabs.watchtower.enable=${WATCHTOWER_LABEL_ENABLE}'

networks:
  compose_network:
    name: ${NETWORK_NAME}
    external: true