services:

  lemon:
    image: coudot/lemonldap-ng:2.0.14
    restart: always

    volumes:
      - ./lemonldap-etc/:/etc/lemonldap-ng
      - ./lemonldap-conf/:/var/lib/lemonldap-ng/conf
        #- ./lemonldap-psessions/:/var/lib/lemonldap-ng/psessions
        #- ./lemonldap-sessions/:/var/lib/lemonldap-ng/sessions
      - ./lemonldap-logs:/var/log/nginx

    environment:
      - SSODOMAIN=$APP_TOP_DOMAIN
      - PORTAL_HOSTNAME=auth.$APP_TOP_DOMAIN
      - MANAGER_HOSTNAME=lemon.$APP_TOP_DOMAIN
      - HANDLER_HOSTNAME=handler.$APP_TOP_DOMAIN
      - TEST1_HOSTNAME=mytest1.$APP_TOP_DOMAIN
      - TEST2_HOSTNAME=mytest2.$APP_TOP_DOMAIN
      - LOGLEVEL=debug
    labels:
      traefik.enable: "true"
      traefik.http.routers.lemon.entrypoints: front-http,front-https
        #traefik.http.routers.lemon.rule: Host(`(auth|lemon|handler).$APP_TOP_DOMAIN`)
      traefik.http.routers.lemon.rule: Host(`auth.$APP_TOP_DOMAIN`,`lemon.$APP_TOP_DOMAIN`,`handler.$APP_TOP_DOMAIN`)
        #traefik.http.routers.lemon.rule: Host(`lemon.$APP_TOP_DOMAIN`)
      traefik.http.routers.lemon.service: lemon
      traefik.http.routers.lemon.tls: "true"
      traefik.http.routers.lemon.tls.certresolver: $TRAEFIK_CERTRESOLV
      traefik.http.services.lemon.loadbalancer.server.port: '80'