version: '3.6'

networks:
  {{ is_collector_docker_network }}:
  {{ is_collector_haproxy_public_net }}:
    external: true

secrets:
  {{ service_prefix }}-ghn-config-{{ scope_name }}:
    external: true
  {{ service_prefix }}-jndi-config-{{ scope_name }}:
    external: true
  {{ service_prefix }}-server-config-{{ scope_name }}:
    external: true
  gcube-dev-legacy-security-key:
    external: true
{% for item in gcube_dev_security_keys %}
  {{ item.name }}:
    external: true
{% endfor %}

volumes:
  is_collector_{{ scope_name }}:
    driver: local
    driver_opts:
      type: nfs4
      # o: "nfsvers=4,addr=192.168.1.222,rw,nolock,soft"
      o: "nfsvers=4,addr=192.168.1.222,rw"
      device: ":/nfs_is_collector_{{ scope_name }}"

services:
  {{ is_collector_docker_service_server_name }}:
    image: {{ is_collector_docker_server_image }}
    networks:
      - {{ is_collector_docker_network }}
      - {{ is_collector_haproxy_public_net }}
    volumes:
      - is_collector_{{ scope_name }}:/gcube-data
    secrets:
      - source: {{ service_prefix }}-ghn-config-{{ scope_name }}
        target: /home/gcube/gCore/config/GHNConfig.xml
        uid: "333"
        gid: "333"
        mode: 0440
      - source: {{ service_prefix }}-jndi-config-{{ scope_name }}
        target: /home/gcube/gCore/{{ config_dir }}/jndi-config.xml
        uid: "333"
        gid: "333"
        mode: 0444
      - source: {{ service_prefix }}-server-config-{{ scope_name }}
        target: /home/gcube/gCore/etc/globus_wsrf_core/server-config.wsdd
        uid: "333"
        gid: "333"
        mode: 0440
      - source: gcube-dev-legacy-security-key
        target: /home/gcube/gCore/config/symm.key
        uid: "333"
        gid: "333"
        mode: 0440
{% for item in gcube_dev_security_keys %}
      - source: {{ item.name }}
        target: /home/gcube/gCore/config/{{ item.name }}
        uid: "333"
        gid: "333"
        mode: 0440
{% endfor %}
    deploy:
      mode: replicated
      replicas: 1
      endpoint_mode: dnsrr
      placement:
        constraints: [node.role == worker]
      restart_policy:
        condition: on-failure
        delay: 5s
        max_attempts: 5
        window: 120s
    logging:
      driver: 'journald'