services:
  website:
    image: nginx:{{ website_nginx_version }}
    container_name: website
    restart: unless-stopped
    volumes:
      - {{ website_data_dir }}/html:/usr/share/nginx/html:ro
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.website.rule=Host(`{{ base_domain }}`)"
      - "traefik.http.routers.website.tls=true"
      - "traefik.http.routers.website.tls.certresolver=letsencrypt"
      - "traefik.http.services.website.loadbalancer.server.port=80"
    networks:
      - {{ sovereign_network_name }}
    logging:
      driver: gelf
      options:
        gelf-address: "udp://{{ graylog_host }}:{{ graylog_gelf_port }}"
        tag: "website"

networks:
  {{ sovereign_network_name }}:
    external: true