version: '3.7'

services:
  # --- NGINX ---
  nginx:
      image: nginx:latest
      ports:
        - '80:80'
        - '443:443'
      deploy:
        replicas: 4
        update_config:
          parallelism: 2
          order: start-first
          failure_action: rollback
          delay: 10s
        rollback_config:
          parallelism: 0
          order: stop-first
        restart_policy:
          condition: any
          delay: 5s
          max_attempts: 3
          window: 120s
      healthcheck:
        test: ["CMD", "service", "nginx", "status"]
      configs:
        - source: nginx_conf
          target: /etc/nginx/nginx.conf
        - source: nginx_static
          target: /var/www/default/index.html
      secrets:
        - source: reterup_bundle_cert
          target: /etc/nginx/reterup-bundle.pem
        - source: reterup_key
          target: /etc/nginx/reterup-privkey.pem

configs:
  nginx_conf:
    file: ../configs/node.conf
  nginx_static:
    file: ../content/index.html

secrets:
  reterup_bundle_cert:
    file: ../certs/reterup_bundle_cert.pem
  reterup_key:
    file: ../certs/reterup-privkey.pem