app-compose.yml

# DOCKER SERVICE
---
version: "3.5"
services:
  wp-bar:
    image: registry.stage.mydomain.com/foo/wp-bar:latest
    networks:
      foo_stage_network:
      wp-bar-backend:
        aliases:
          - wp
    ports:
      - 80
    volumes:
      - ./wp-content:/var/www/html/wp-content
    secrets:
      - source: db.pass
      - source: db.user
      - source: db.name
    environment:
      WORDPRESS_DEBUG: "0"
      WORDPRESS_DB_HOST: "${WORDPRESS_DATABASE_HOST:-db}"
      WORDPRESS_DB_PASSWORD_FILE: "/run/secrets/db.pass"
      WORDPRESS_DB_USER_FILE: "/run/secrets/db.user"
      WORDPRESS_DB_NAME_FILE: "/run/secrets/db.name"
      WORDPRESS_TABLE_PREFIX: "wp_"
      VIRTUAL_HOST: "mydomain.com"
      VIRTUAL_PORT: "80"
    deploy:
      labels:
        - "traefik.http.middlewares.https_redirect.redirectscheme.permanent=true"
        - "traefik.http.middlewares.https_redirect.redirectscheme.scheme=https"
        - "traefik.http.middlewares.testHeader.headers.framedeny=true"
        - "traefik.http.middlewares.testHeader.headers.sslredirect=true"
        - "traefik.http.routers.bar-secured.entrypoints=https"
        - "traefik.http.routers.bar-secured.rule=Host(`mydomain.com`)"
        - "traefik.http.routers.bar-secured.tls=true"
        - "traefik.http.routers.bar-secured.tls.certresolver=default"
        - "traefik.http.routers.bar.middlewares=https_redirect"
        - "traefik.http.routers.bar.rule=Host(`mydomain.com`)"
        - "traefik.http.services.bar.loadbalancer.server.port=80"
        - "traefik.enable=true"
        - "traefik.http.routers.bar.entrypoints=http"
        - "com.mydomain.tenant.hash=foo"
        - "com.mydomain.service.hash=bar"
      mode: replicated
      replicas: 1
      endpoint_mode: vip
      restart_policy:
        condition: on-failure
        delay: 15s
        max_attempts: 5
        window: 30s
      resources:
        limits:
          memory: 1024M
        reservations:
          memory: 512M
  db-bar:
    image: registry.stage.mydomain.com/foo/wp-bar-db:latest
    networks:
      wp-bar-backend:
        aliases:
          - db
    volumes:
      - mysql:/var/lib/mysql
    secrets:
      - db.root
      - db.name
      - db.pass
      - db.user
    environment:
      MYSQL_ROOT_PASSWORD_FILE: "/run/secrets/db.root"
      MYSQL_DATABASE_FILE: "/run/secrets/db.name"
      MYSQL_PASSWORD_FILE: "/run/secrets/db.pass"
      MYSQL_USER_FILE: "/run/secrets/db.user"
    deploy:
      mode: replicated
      replicas: 1
      labels:
        - "com.mydomain.tenant.hash=foo"
        - "com.mydomain.service.hash=bar"
      restart_policy:
        condition: on-failure
      resources:
        limits:
          memory: 512M
        reservations:
          memory: 256M
  ad-bar:
    image: adminer:latest
    networks:
      foo_stage_network:
      wp-bar-backend:
    environment:
      VIRTUAL_HOST: "admin-mydomain.com"
      VIRTUAL_PORT: "8080"
    deploy:
      mode: replicated
      replicas: 1
      endpoint_mode: dnsrr
      labels:
        - "com.mydomain.tenant.hash=foo"
        - "com.mydomain.service.hash=bar"
        - "traefik.http.middlewares.https_redirect.redirectscheme.permanent=true"
        - "traefik.http.middlewares.https_redirect.redirectscheme.scheme=https"
        - "traefik.http.routers.ad-bar-secured.entrypoints=https"
        - "traefik.http.routers.ad-bar-secured.rule=Host(`admin-mydomain.com`)"
        - "traefik.http.routers.ad-bar-secured.tls=true"
        - "traefik.http.routers.ad-bar-secured.tls.certresolver=default"
        - "traefik.http.routers.ad-bar.middlewares=https_redirect"
        - "traefik.http.routers.ad-bar.rule=Host(`admin-mydomain.com`)"
        - "traefik.http.services.ad-bar.loadbalancer.server.port=8080"
        - "traefik.enable=true"
        - "traefik.http.routers.ad-bar.entrypoints=http"
      restart_policy:
        condition: on-failure
        max_attempts: 3
        window: 15s
volumes:
  mysql:
    driver: local
    name: "foo_wp-bar--mysql"
  wp-content:
    driver: local
    name: "foo_bar--wp-content-30ae62014fefdfeb4a936dabb9d08fc1eed6fac5"
secrets:
  stage.robots.txt:
    external: true
  db.root:
    external: true
    name: "stage.db.root.pass"
  db.name:
    external: true
    name: "foo_wp-bar.stage.database"
  db.pass:
    external: true
    name: "foo_wp-bar.stage.user.pass"
  db.user:
    external: true
    name: "foo_wp-bar.stage.user.name"
networks:
  foo_stage_network:
    external: true
  wp-bar-backend:
    driver: overlay
    internal: true
    driver_opts:
      encrypted: "true"