name: mysql-workbench

secrets:
#  mariadb_database_name:
#    file: ${SECRETSDIR}/mariadb_database_name
#  mariadb_username:
#    file: ${SECRETSDIR}/mariadb_username
#  mariadb_password:
#    file: ${SECRETSDIR}/mariadb_password
  mariadb_root_password:
    file: ${SECRETSDIR}/mariadb_root_password
    
networks:
  traefik-net:
    external: true
  mariadb-net:
    external: true
    
services:
  mysql-workbench:
    image: lscr.io/linuxserver/mysql-workbench:latest
    hostname: mysql-workbench
    deploy:
      resources:
        reservations:
          devices:
            - driver: nvidia
              count: 1
              capabilities: [compute,video,graphics,utility]
    cap_add:
      - IPC_LOCK
    volumes:
      - "${DATADIR}/config:/config"
#    ports:
#      - 3000:3000
#      - 3001:3001
    restart: unless-stopped
    env_file: .mysql-workbench.env
    networks:
      - traefik-net
      - mariadb-net
    labels:
      - traefik.enable=true
      - traefik.docker.network=traefik-net
      #
      - "traefik.http.middlewares.${APPLICATION_NAME}-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.middlewares.${APPLICATION_NAME}-https-redirect.redirectscheme.permanent=true"
      #
      - "traefik.http.services.${APPLICATION_NAME}-svc.loadbalancer.server.port=${WEBUI_PORT}"
      #
      - "traefik.http.routers.${APPLICATION_NAME}-rtr.entrypoints=web"
      - "traefik.http.routers.${APPLICATION_NAME}-rtr.rule=Host(`${APPLICATION_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`)"
      - "traefik.http.routers.${APPLICATION_NAME}-rtr.middlewares=${APPLICATION_NAME}-https-redirect"
      #
      - "traefik.http.routers.${APPLICATION_NAME}-rtr.service=${APPLICATION_NAME}-svc"
      #
      - "traefik.http.routers.${APPLICATION_NAME}-secure-rtr.entrypoints=websecure"
      - "traefik.http.routers.${APPLICATION_NAME}-secure-rtr.rule=Host(`${APPLICATION_NAME}.${DOMAINNAME}`)&& PathPrefix(`/`)"
      - "traefik.http.routers.${APPLICATION_NAME}-secure-rtr.tls=true"
      - "traefik.http.routers.${APPLICATION_NAME}-secure-rtr.tls.certresolver=sthomeresolver"
      #
      - "traefik.http.routers.${APPLICATION_NAME}-secure-rtr.service=${APPLICATION_NAME}-svc"