services:
  app:
    dns:
    - 192.168.77.101
    - 192.168.77.1
    secrets:
    - semaphore_admin_password
    environment:
      SEMAPHORE_ACCESS_KEY_ENCRYPTION: MflCLIUF5bn6Lgkuwy4BoAdIFhoZ4Ief2oocXmuZSjs=
      SEMAPHORE_ADMIN: admin
      SEMAPHORE_ADMIN_EMAIL: jaydee@sectorq.eu
      SEMAPHORE_ADMIN_NAME: admin
      SEMAPHORE_ADMIN_PASSWORD_FILE: /run/secrets/semaphore_admin_password
      SEMAPHORE_DB: semaphore_db
      SEMAPHORE_DB_HOST: db
      SEMAPHORE_DB_PASS: StrongPassw0rd
      SEMAPHORE_DB_PORT: 3306
      SEMAPHORE_DB_USER: semaphore_user
      SEMAPHORE_LDAP_ACTIVATED: 'no'
      SEMAPHORE_LDAP_DN_BIND: cn=jaydee,ou=users,dc=sectorq,dc=eu
      SEMAPHORE_LDAP_DN_SEARCH: dc=sectorq,dc=eu
      SEMAPHORE_LDAP_HOST: 192.168.77.101
      SEMAPHORE_LDAP_NEEDTLS: 'no'
      SEMAPHORE_LDAP_PASSWORD: administrator
      SEMAPHORE_LDAP_PORT: '2389'
      SEMAPHORE_LDAP_SEARCH_FILTER: (&(objectClass=inetOrgPerson)(uid=%s))
      SEMAPHORE_PLAYBOOK_PATH: /tmp/semaphore/
      TZ: Europe/Bratislava
    image: ${DOCKER_REGISTRY:-}semaphoreui/semaphore:latest
    ports:
    - target: 3000
      published: 3002
      protocol: tcp
      mode: ingress
    volumes:
    - /etc/localtime:/etc/localtime:ro
    - data:/etc/semaphore/
    deploy:
      labels:
        com.centurylinklabs.watchtower.enable: 'true'
        wud.watch: 'true'
        wud.watch.digest: 'true'
      replicas: 2
  db:
    environment:
      MYSQL_DATABASE: semaphore_db
      MYSQL_PASSWORD: StrongPassw0rd
      MYSQL_RANDOM_ROOT_PASSWORD: 'yes'
      MYSQL_USER: semaphore_user
    image: ${DOCKER_REGISTRY:-}mysql:8.0
    volumes:
    - db:/var/lib/mysql
    deploy:
      labels:
        wud.watch: 'true'
        wud.watch.digest: 'true'
      replicas: 2
volumes:
  data:
  db:
secrets:
  semaphore_admin_password:
    external: true