services:
  privatemode-proxy:
    image: ghcr.io/edgelesssys/privatemode/privatemode-proxy:latest
    restart: unless-stopped
    env_file:
      - .env
    command: ["--apiKey", "${API_KEY}"]
    networks:
      - proxy
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.privatemode-proxy.rule=Host(`privatemodeai.gandalf.dfas4.de`)"
      - "traefik.http.routers.privatemode-proxy.entrypoints=websecure"
      - "traefik.http.routers.privatemode-proxy.tls=true"
      - "traefik.http.routers.privatemode-proxy.tls.certresolver=myresolver"
      - "traefik.http.services.privatemode-proxy.loadbalancer.server.port=8080"
      - "traefik.http.routers.privatemode-proxy.tls.domains[0].main=gandalf.dfas4.de"
      - "traefik.http.routers.privatemode-proxy.tls.domains[0].sans=*.gandalf.dfas4.de"
networks:
  proxy:
    name: proxy