docker-compose.yml

version: '3.7'
services:
  app:
    build: .
    image: voctoconf
    restart: always
    command: gunicorn voctoconf.wsgi:application --bind 0.0.0.0:8000
    volumes:
      - django_static:/app/_static
      - django_media:/app/_media
      - ./_db.sqlite3:/app/_db.sqlite3
      - ./_bbb_secrets:/app/_bbb_secrets
    labels:
      traefik.enable: "true"
      traefik.docker.network: "web"
      traefik.http.routers.voctoconf.rule: "Host(`virtual.piandmore.de`)"
      traefik.http.routers.voctoconf.entrypoints: "web"
      traefik.http.routers.voctoconf.middlewares: "redirect-to-https@file, add-sts-with-subdomains@file"
      traefik.http.routers.voctoconfsecure.rule: "Host(`virtual.piandmore.de`)"
      traefik.http.routers.voctoconfsecure.tls.certresolver: "le"
      traefik.http.routers.voctoconfsecure.entrypoints: "websecure"
      traefik.http.routers.voctoconfsecure.middlewares: "add-sts-with-subdomains@file"
    networks:
      - default
      - redis
      - web
    environment:
      DJANGO_MANAGEPY_MIGRATE: "on"
      DJANGO_MANAGEPY_COLLECTSTATIC: "on"
    env_file:
      - prod.env
  redis:
    image: redis:latest
    restart: always
    networks:
      - redis
    labels:
      com.centurylinklabs.watchtower.enable: "true"
  nginx:
    image: nginx:stable-alpine
    restart: always
    volumes:
      - django_static:/app/_static
      - django_media:/app/_media
      - ./nginx.conf:/etc/nginx/nginx.conf
    networks:
      - default
      - web
    labels:
      traefik.enable: "true"
      traefik.docker.network: "web"
      traefik.http.routers.voctoconfstatic.rule: "Host(`virtual.piandmore.de`) && (PathPrefix(`/static`) || PathPrefix(`/media`))"
      traefik.http.routers.voctoconfstatic.entrypoints: "web"
      traefik.http.routers.voctoconfstatic.middlewares: "redirect-to-https@file, add-sts-with-subdomains@file"
      traefik.http.routers.voctoconfstaticsecure.rule: "Host(`virtual.piandmore.de`) && (PathPrefix(`/static`) || PathPrefix(`/media`))"
      traefik.http.routers.voctoconfstaticsecure.tls.certresolver: "le"
      traefik.http.routers.voctoconfstaticsecure.entrypoints: "websecure"
      traefik.http.routers.voctoconfstaticsecure.middlewares: "add-sts-with-subdomains@file"
  cron:
    image: voctoconf
    restart: always
    command: '/app/cron.sh'
    volumes:
      - django_static:/app/_static
      - django_media:/app/_media
      - ./_db.sqlite3:/app/_db.sqlite3
      - ./_bbb_secrets:/app/_bbb_secrets
      - '/etc/localtime:/etc/localtime:ro'
    networks:
      - default
    env_file:
      - prod.env  

volumes:
  django_static:
  django_media:

networks:
  default:
  redis:
  web:
    external:
      name: web