version: '3.6'

networks:
  {{ resource_manager_docker_network }}:
  {{ resource_manager_haproxy_public_net }}:
    external: true

secrets:
  ghn-config-{{ scope_name }}:
    external: true
  jndi-config-{{ scope_name }}:
    external: true  
  server-config-{{ scope_name }}:
    external: true
  gcube-dev-legacy-security-key:
    external: true
{% for item in gcube_dev_security_keys %}
  {{ item.name }}:
    external: true
{% endfor %}

services:
  {{ resource_manager_docker_service_server_name }}:
    image: {{ resource_manager_docker_server_image }}
    networks:
      - {{ resource_manager_docker_network }}
      - {{ resource_manager_haproxy_public_net }}
    secrets:
      - source: ghn-config-{{ scope_name }}
        target: /home/gcube/gCore/config/GHNConfig.xml
        uid: "333"
        gid: "333"
        mode: 0440
      - source: jndi-config-{{ scope_name }}
        target: /home/gcube/gCore/{{ config_dir }}/jndi-config.xml
        uid: "333"
        gid: "333"
        mode: 0444
      - source: server-config-{{ scope_name }}
        target: /home/gcube/gCore/etc/globus_wsrf_core/server-config.wsdd
        uid: "333"
        gid: "333"
        mode: 0440
      - source: gcube-dev-legacy-security-key
        target: /home/gcube/gCore/config/symm.key
        uid: "333"
        gid: "333"
        mode: 0440
{% for item in gcube_dev_security_keys %}
      - source: {{ item.name }}
        target: /home/gcube/gCore/config/{{ item.name }}
        uid: "333"
        gid: "333"
        mode: 0440
{% endfor %}
    deploy:
      mode: replicated
      replicas: 1
      endpoint_mode: dnsrr
      placement:
        constraints: [node.role == worker]
      restart_policy:
        condition: on-failure
        delay: 5s
        max_attempts: 5
        window: 120s
    logging:
      driver: 'journald'