services:
  checkmk:
    image: "checkmk/check-mk-raw:2.4.0-latest"
    container_name: "checkmk"
    restart: unless-stopped
    # ports:
    #   - 5000:5000
    #   - 6776:8000
    volumes:
      - sites:/omd/sites
    tmpfs:
      - /opt/omd/sites/cmk/tmp:uid=1000,gid=1000
    environment:
      - CMK_PASSWORD=${CMK_PASSWORD:-password}
      - CMK_SITE_ID=cmk
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=proxy"
      - "traefik.http.services.checkmk.loadbalancer.server.port=5000"

      # Prod Router
      - "traefik.http.routers.checkmk.rule=Host(`cmk.forust.xyz`)"
      - "traefik.http.routers.checkmk.entrypoints=websecure"
      - "traefik.http.routers.checkmk.middlewares=security-headers@file"
      - "traefik.http.routers.checkmk.tls=true"
      # Local Router
      - "traefik.http.routers.checkmk-local.rule=Host(`cmk.workstation.internal`)"
      - "traefik.http.routers.checkmk-local.entrypoints=websecure"
      - "traefik.http.routers.checkmk-local.middlewares=security-headers@file"
      - "traefik.http.routers.checkmk-local.tls=true"
      # Dev Router
      - "traefik.http.routers.checkmk-dev.rule=Host(`cmk.gigaforust.internal`)"
      - "traefik.http.routers.checkmk-dev.middlewares=security-headers@file"
      - "traefik.http.routers.checkmk-dev.entrypoints=websecure"
      - "traefik.http.routers.checkmk-dev.tls=true"
    networks:
      - proxy
networks:
  proxy:
    external: true
volumes:
  sites: