services:
  flame:
    image: pawelmalak/flame
    container_name: flame
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    volumes:
      - /srv/docker/flame:/app/data
      #- /var/run/docker.sock:/var/run/docker.sock # optional but required for Docker integration
    environment:
      PASSWORD: ${PASSWORD}
      DOCKER_HOST: tcp://socket-proxy:2375   # route through proxy
      mem_limit: 256m
      cpus: "0.50"
    networks:
      - traefik_network
      - socket_proxy
    labels:
      ### Enable Traefik
      - traefik.enable=true
      ### For HTTP
      #- traefik.http.routers.${SERVICE_NAME}.rule=Host(`${SERVICE_NAME}.${DOMAIN_NAME}`)
      #- traefik.http.routers.${SERVICE_NAME}.entrypoints=web
      ### For HTTPS
      - traefik.http.routers.${SERVICE_NAME}-https.tls=true
      - traefik.http.routers.${SERVICE_NAME}-https.tls.certresolver=cloudflare
      - traefik.http.routers.${SERVICE_NAME}-https.entrypoints=websecure
      - traefik.http.routers.${SERVICE_NAME}-https.rule=Host(`${SERVICE_NAME}.${DOMAIN_NAME}`)
      ### Monitor with uptime-kuma
      - kuma.monitoring.group.name=Docker Containers
      - kuma.${SERVICE_NAME}.docker.parent_name=monitoring
      - kuma.${SERVICE_NAME}.docker.name=${SERVICE_NAME}
      - kuma.${SERVICE_NAME}.docker.type=docker
      - kuma.${SERVICE_NAME}.docker.docker_container=${SERVICE_NAME}
      - kuma.${SERVICE_NAME}.docker.docker_host=1
      - 'kuma.${SERVICE_NAME}.docker.tag_names=[{"name": "docker_tag"}]'

networks:
  traefik_network:
    external: true
  socket_proxy:
    external: true
    name: docker_socket_proxy