#### NETWORKS
networks:
  traefik_front_network:
    external: true

#### SERVICES
services:
  vault:
    container_name: vault-app
    hostname: vault-app
    image: hashicorp/vault:latest
    environment:
      VAULT_ADDR: "https://vault.tips-of-mine.com"
      VAULT_API_ADDR: "https://vault.tips-of-mine.com"
      VAULT_ADDRESS: "https://vault.tips-of-mine.com"
#      VAULT_UI: true
      # VAULT_TOKEN:
      TZ: "Europe/Paris"
    ports:
      - "8200:8200"
      - "8201:8201"
    networks:
    - traefik_front_network
    restart: always
    volumes:
      - ./logs:/vault/logs/:rw
      - ./data:/vault/data/:rw
      - ./config:/vault/config/:rw
      - ./certs:/certs/:rw
      - ./file:/vault/file/:rw
      - ./policy:/vault/policy/:rw
    cap_add:
      - IPC_LOCK
    entrypoint: vault server -config /vault/config/config.hcl
    labels:
      - "com.centurylinklabs.watchtower.enable=true"
      - "traefik.enable=true"
      - "traefik.docker.network=traefik_front_network"
# HTTP
      - "traefik.http.routers.vault-http.rule=Host(`vault.tips-of-mine.com`)"
      - "traefik.http.routers.vault-http.entrypoints=http"
      - "traefik.http.routers.vault-http.priority=39"
# HTTPS
      - "traefik.http.routers.vault-https.rule=Host(`vault.tips-of-mine.com`)"
      - "traefik.http.routers.vault-https.entrypoints=https"
      - "traefik.http.routers.vault-https.tls=true"
      - "traefik.http.routers.vault-https.priority=40"
# Middleware
# Service
      - "traefik.http.services.vault-https-service.loadbalancer.server.port=8200"
#      - "traefik.http.services.vault-https-service.loadbalancer.server.scheme=https"
#      - "traefik.http.services.vault-https-service.loadbalancer.healthcheck.hostname=vault.tips-of-mine.com"
#      - "traefik.http.services.vault-https-service.loadbalancer.healthcheck.method=foobar"
#      - "traefik.http.services.vault-https-service.loadbalancer.healthcheck.timeout=10"
#      - "traefik.http.services.vault-https-service.loadbalancer.healthcheck.interval=30"