version: '3.4'

services:
  nuudi:
#    depends_on:
#      - node
    deploy:
      replicas: 1
      mode: replicated
      placement:
        constraints:
          - node.role == manager
          - node.hostname == hetzner
    image: wordpress
#    ports:
#      - 8090:80
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik-network
      - traefik.constraint-label=traefik-network
      - traefik.http.routers.wp-nuudi-http.middlewares=http-to-https
      - traefik.http.routers.wp-nuudi-https.rule=Host(`www.nuuditalu.ee`) || Host(`nuuditalu.ee`)
      - traefik.http.routers.wp-nuudi-https.entrypoints=websecure
      - traefik.http.routers.wp-nuudi-http.rule=Host(`www.nuuditalu.ee`) || Host(`nuuditalu.ee`)
      - traefik.http.routers.wp-nuudi-http.entrypoints=web
      - traefik.http.routers.wp-nuudi-https.tls.certresolver=mychallenge
      - traefik.http.services.wp-nuudi.loadbalancer.server.port=80
## https redirect to www
      - "traefik.http.routers.wp-nuudi-https.middlewares=https-to-www-redirect"
      - "traefik.http.middlewares.https-to-www-redirect.redirectregex.regex=^https://(?:www.)?nuuditalu.ee/(.*)"
      - "traefik.http.middlewares.https-to-www-redirect.redirectregex.replacement=https://www.nuuditalu.ee/$${1}"
## service point
#      - "traefik.http.routers.nginx-www-http.service=nginx-www"
#      - "traefik.http.routers.nginx-www-https.service=nginx-www"


    volumes:
      - wordpress:/var/www/html
      - /etc/localtime:/etc/localtime
#      - "/etc/timezone:/etc/timezone:ro"
#      - "/etc/localtime:/etc/localtime:ro"
      - backups:/srv/backups
    networks:
      - db-network
      - traefik-network
    environment:
      - WORDPRESS_DB_HOST=node:3306
      - WORDPRESS_DB_USER=wp_nuudi
      - WORDPRESS_DB_PASSWORD=OiS9lpzCynHKusjak97s6DgenDU
      - WORDPRESS_DB_NAME=wp_nuudi
  #    NODE_ADDRESS: ^10.0.*.*
      - TZ="Europe/Tallinn"

volumes:
  wordpress:
    name: '{{.Service.Name}}-{{.Task.Slot}}-data'
    driver: local
  backups:
    name: '{{.Service.Name}}-{{.Task.Slot}}-backups'
    driver: local


networks:
  db-network:
    external: true
  traefik-network:
    external: true


## ------------------- mysql käsud --------------------------
## 1. logi nod konteinerisse sisse
# SHOW GRANTS FOR 'user'@'%';
# GRANT ALL PRIVILEGES ON * . * TO 'user'@'%';