version: '3.5'
services:
  nginx:
    build:
      context: .
      dockerfile: ./nginx/Dockerfile
    image: sngfnch/nginx
    restart: always
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /var/run/docker.sock:/tmp/docker.sock:ro
      - certsvolume:/etc/nginx/certs
      - vhostvolume:/etc/nginx/vhost.d
      - challengefilevolume:/usr/share/nginx/html
    links:
      - api_service
    networks:
      - external
      - internal
  postgres:
    hostname: postgres
    image: postgres:10
    restart: always
    environment:
      - POSTGRES_PASSWORD_FILE=/run/secrets/postgres_password
    volumes:
      - pgdata:/var/lib/postgresql/data
    secrets:
      - postgres_password
    networks:
      - internal
  rabbit:
    hostname: rabbit
    image: rabbitmq:management
    environment:
      - RABBITMQ_DEFAULT_USER=slideshow
      - RABBITMQ_DEFAULT_PASS_FILE=/run/secrets/rabbitmq_password
    secrets:
      - rabbitmq_password
    networks:
      - internal
  redis:
    image: redis
    networks:
      - internal
  api_service:
    image: sngfnch/api_service
    build:
      context: .
      dockerfile: ./docker/api_service.dockerfile
    environment:
      - POSTGRES_PASSWORD_FILE=/run/secrets/postgres_password
      - VIRTUAL_HOST=api_service.local
      - VIRTUAL_PORT=5000
      - API_CREDENTIALS_FILE=/run/secrets/api_credentials_file
    ports:
      - "5000:5000"
    volumes:
      - logvolume01:/var/log
      - jobsvolume:/tmp/jobs
    links:
      - redis
      - postgres
      - image_service
      - video_service
    secrets:
      - postgres_password
      - rabbitmq_password
      - api_credentials_file
    networks:
      - internal
  image_service:
    image: sngfnch/image_service
    build:
      context: .
      dockerfile: ./docker/image_service.dockerfile
    environment:
      - RABBITMQ_DEFAULT_USER=slideshow
      - RABBITMQ_DEFAULT_PASS_FILE=/run/secrets/rabbitmq_password
      - AWS_ACCESS_CREDS_FILE=/run/secrets/aws_access_creds_file
    volumes:
      - logvolume01:/var/log
      - jobsvolume:/tmp/jobs
    links:
      - redis
      - rabbit
    secrets:
      - rabbitmq_password
      - aws_access_creds_file
    networks:
      - internal
  video_service:
    image: sngfnch/video_service
    build:
      context: .
      dockerfile: ./docker/video_service.dockerfile
    environment:
      - RABBITMQ_DEFAULT_USER=slideshow
      - RABBITMQ_DEFAULT_PASS_FILE=/run/secrets/rabbitmq_password
      - AWS_ACCESS_CREDS_FILE=/run/secrets/aws_access_creds_file
    volumes:
      - logvolume01:/var/log
      - jobsvolume:/tmp/jobs
    links:
      - redis
      - rabbit
    secrets:
      - rabbitmq_password
      - aws_access_creds_file
    networks:
      - internal
  image_worker:
    image: sngfnch/image_worker
    build:
      context: .
      dockerfile: ./docker/image_worker.dockerfile
    environment:
      - RABBITMQ_DEFAULT_USER=slideshow
      - RABBITMQ_DEFAULT_PASS_FILE=/run/secrets/rabbitmq_password
      - AWS_ACCESS_CREDS_FILE=/run/secrets/aws_access_creds_file
    volumes:
      - logvolume01:/var/log
      - jobsvolume:/tmp/jobs
    links:
      - redis
      - rabbit
    secrets:
      - rabbitmq_password
      - aws_access_creds_file
    networks:
      - internal
      - external # To hit S3
  video_worker:
    image: sngfnch/video_worker
    build:
      context: .
      dockerfile: ./docker/video_worker.dockerfile
    environment:
      - RABBITMQ_DEFAULT_USER=slideshow
      - RABBITMQ_DEFAULT_PASS_FILE=/run/secrets/rabbitmq_password
      - AWS_ACCESS_CREDS_FILE=/run/secrets/aws_access_creds_file
    volumes:
      - logvolume01:/var/log
      - jobsvolume:/tmp/jobs
    links:
      - redis
      - rabbit
    secrets:
      - rabbitmq_password
      - aws_access_creds_file
    networks:
      - internal
      - external # To hit S3
volumes:
  logvolume01: {}
  jobsvolume: {}
  pgdata: {}
  certsvolume: {}
  vhostvolume: {}
  challengefilevolume: {}
secrets:
  aws_access_creds_file:
    file: ./secrets/aws_access_creds_file
  rabbitmq_password:
    file: ./secrets/rabbitmq_password
  postgres_password:
    file: ./secrets/postgres_password
  api_credentials_file:
    file: ./secrets/api_credentials_file
networks:
  internal:
    driver: overlay
    internal: true
  external:
    driver: overlay