services:
  checkmk:
    image: "checkmk/check-mk-raw:2.4.0-latest"
    container_name: "checkmk"
    environment:
      - CMK_PASSWORD=${CMK_PASSWORD:-password}
      - CMK_SITE_ID=cmk

    volumes:
      - sites:/omd/sites
    tmpfs:
      - /opt/omd/sites/cmk/tmp:uid=1000,gid=1000
    ports:
      - 5000:5000
      - 6776:8000
    restart: always
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=proxy"
      - "traefik.http.services.checkmk.loadbalancer.server.port=5000"

      # Prod Router
      - "traefik.http.routers.checkmk.rule=Host(`cmk.forust.xyz`)"
      - "traefik.http.routers.checkmk.entrypoints=websecure"
      - "traefik.http.routers.checkmk.service=checkmk"
      - "traefik.http.routers.checkmk.middlewares=security-headers@file"
      - "traefik.http.routers.checkmk.tls=true"

      # Local Router
      - "traefik.http.routers.checkmk-local.rule=Host(`cmk.workstation.internal`) || Host(`cmk.internal`)"
      - "traefik.http.routers.checkmk-local.entrypoints=websecure"
      - "traefik.http.routers.checkmk-local.service=checkmk"
      - "traefik.http.routers.checkmk-local.middlewares=security-headers@file"
      - "traefik.http.routers.checkmk-local.tls=true"

      # Dev Router
      - "traefik.http.routers.checkmk-dev.rule=Host(`cmk.gigaforust.internal`)"
      - "traefik.http.routers.checkmk-dev.middlewares=security-headers@file"
      - "traefik.http.routers.checkmk-dev.service=checkmk"
      - "traefik.http.routers.checkmk-dev.entrypoints=websecure"
      - "traefik.http.routers.checkmk-dev.tls=true"

    networks:
      - proxy

networks:
  proxy:
    external: true
volumes:
  sites: