services:
  katheryn-frontend:
    build:
      context: .
      dockerfile: Dockerfile
      args:
        - DIRECTUS_API_TOKEN=katheryn-frontend-readonly-8591de0316ded82fab45328cf1e49cb1
        - NEXT_PUBLIC_DIRECTUS_ASSET_URL=http://katheryn-cms:8055
        - NEXT_PUBLIC_DIRECTUS_ASSET_TOKEN=katheryn-frontend-readonly-8591de0316ded82fab45328cf1e49cb1
    container_name: katheryn-frontend
    restart: unless-stopped
    env_file:
      - /opt/secrets/katheryn-website/.env
    environment:
      - NEXT_PUBLIC_DIRECTUS_URL=https://katheryn-cms.jeffemmett.com
      - DIRECTUS_API_TOKEN=katheryn-frontend-readonly-8591de0316ded82fab45328cf1e49cb1
      - DIRECTUS_INTERNAL_URL=http://katheryn-cms:8055
      - NEXT_PUBLIC_DIRECTUS_ASSET_URL=http://katheryn-cms:8055
      - NEXT_PUBLIC_DIRECTUS_ASSET_TOKEN=katheryn-frontend-readonly-8591de0316ded82fab45328cf1e49cb1
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.katheryn-staging.rule=Host(`katheryn-staging.jeffemmett.com`)"
      - "traefik.http.routers.katheryn-staging.entrypoints=web"
      - "traefik.http.services.katheryn-staging.loadbalancer.server.port=3000"
    networks:
      - traefik-public
      - directus_katheryn-internal
    read_only: true
    tmpfs:
      - /tmp
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges:true

networks:
  traefik-public:
    external: true
  directus_katheryn-internal:
    external: true