version: "3.1"

networks:
  internal:
    external: false
  traefik:
    external: true

volumes:
  wpdata:
    external: true
  wpdb:
    external: true

services:
  blog:
    image: wordpress:latest
    environment:
      WORDPRESS_DB_HOST: mysql:3306
      WORDPRESS_DB_USER: /run/secrets/WORDPRESS_DB_USER
      WORDPRESS_DB_PASSWORD: /run/secrets/WORDPRESS_DB_PASSWORD
      WORDPRESS_AUTH_KEY: /run/secrets/WORDPRESS_AUTH_KEY
      WORDPRESS_SECURE_AUTH_KEY: /run/secrets/WORDPRESS_SECURE_AUTH_KEY
      WORDPRESS_LOGGED_IN_KEY: /run/secrets/WORDPRESS_LOGGED_IN_KEY
      WORDPRESS_NONCE_KEY: /run/secrets/WORDPRESS_NONCE_KEY
      WORDPRESS_AUTH_SALT: /run/secrets/WORDPRESS_AUTH_SALT
      WORDPRESS_SECURE_AUTH_SALT: /run/secrets/WORDPRESS_SECURE_AUTH_SALT
      WORDPRESS_LOGGED_IN_SALT: /run/secrets/WORDPRESS_LOGGED_IN_SALT
      WORDPRESS_NONCE_SALT: /run/secrets/WORDPRESS_NONCE_SALT
      WP_REDIS_HOST: redis
    volumes:
      - wpdata:/var/www/html
    ports:
      - 80
    deploy:
      replicas: 1
      update_config:
        parallelism: 1
        delay: 10s
      restart_policy:
        condition: on-failure
      labels:
        - traefik.backend=blog
        - traefik.frontend.rule=Host:wp.app.dev
        - traefik.docker.network=traefik
        - traefik.port=80
      secrets:
        - WORDPRESS_DB_USER
        - WORDPRESS_DB_PASSWORD
        - WORDPRESS_AUTH_KEY
        - WORDPRESS_SECURE_AUTH_KEY
        - WORDPRESS_LOGGED_IN_KEY
        - WORDPRESS_NONCE_KEY
        - WORDPRESS_AUTH_SALT
        - WORDPRESS_SECURE_AUTH_SALT
        - WORDPRESS_LOGGED_IN_SALT
        - WORDPRESS_NONCE_SALT
    networks:
      - internal
      - traefik

  mysql:
    image: mysql:latest
    volumes:
      - wpdb:/var/lib/mysql
    environment:
      MYSQL_ROOT_PASSWORD: /run/secrets/MYSQL_ROOT_PASSWORD
      MYSQL_DATABASE: wordpress
      MYSQL_USER: /run/secrets/WORDPRESS_DB_USER
      MYSQL_PASSWORD: /run/secrets/WORDPRESS_DB_PASSWORD
    networks:
      - internal
    deploy:
      replicas: 1
      update_config:
        parallelism: 1
        delay: 10s
      restart_policy:
        condition: on-failure
      secrets:
        - MYSQL_ROOT_PASSWORD
        - WORDPRESS_DB_USER
        - WORDPRESS_DB_PASSWORD
      labels:
        - traefik.enable=false

  redis:
    image: redis:latest
    deploy:
      replicas: 1
      update_config:
        parallelism: 1
        delay: 10s
      restart_policy:
        condition: on-failure
      labels:
        - traefik.enable=false

secrets:
  WORDPRESS_DB_USER:
    external: true
  WORDPRESS_DB_PASSWORD:
    external: true
  MYSQL_ROOT_PASSWORD:
    external: true
  MYSQL_DATABASE:
    external: true
  MYSQL_USER:
    external: true
  MYSQL_PASSWORD:
    external: true
  WORDPRESS_AUTH_KEY:
    external: true
  WORDPRESS_SECURE_AUTH_KEY:
    external: true
  WORDPRESS_LOGGED_IN_KEY:
    external: true
  WORDPRESS_NONCE_KEY:
    external: true
  WORDPRESS_AUTH_SALT:
    external: true
  WORDPRESS_SECURE_AUTH_SALT:
    external: true
  WORDPRESS_LOGGED_IN_SALT:
    external: true
  WORDPRESS_NONCE_SALT:
    external: true