version: '3.8'

services:
  rwallet-online:
    build: .
    container_name: rwallet-online
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /tmp
      - /var/cache/nginx
      - /var/run
    cap_drop:
      - ALL
    cap_add:
      - NET_BIND_SERVICE
      - CHOWN
      - SETGID
      - SETUID
      - DAC_OVERRIDE
    security_opt:
      - no-new-privileges:true
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.rwallet.rule=Host(`rwallet.online`) || Host(`www.rwallet.online`) || Host(`wallets.bondingcurve.tech`) || HostRegexp(`{subdomain:[a-z0-9-]+}.rwallet.online`)"
      - "traefik.http.routers.rwallet.entrypoints=web"
      - "traefik.http.routers.rwallet.priority=130"
      - "traefik.http.services.rwallet.loadbalancer.server.port=80"
    healthcheck:
      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:80/"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 15s
    networks:
      - traefik-public

networks:
  traefik-public:
    external: true