version: '3.6'

secrets:
  dhparam.pem:
    external: true
  registry.example.com.fullchain:
    external: true
  registry.example.com.privkey:
    external: true
  registry_htpasswd:
    external: true

services:

  nginx:
    image: nginx-front:latest
    build:
      context: ./nginx
    ports:
      - target: 8080
        published: 80
        protocol: tcp
        mode: host
      - target: 8443
        published: 443
        protocol: tcp
        mode: host
    restart: always
    deploy:
      mode: global
    logging:
      driver: 'json-file'
      options:
        max-size: '10m'
        max-file: '2'
    secrets:
      - dhparam.pem
      - registry.example.com.fullchain
      - registry.example.com.privkey
      - registry_htpasswd